Custom Security Profile Issue

Summary:

We use custom Person code to restrict HR data, based on the HR Department. We have used it for 3 years and had no issues, but we are now finding several cases where users who were Pending Hires into an HR Department, but were hired into a non-HR department, or who were HR interns, and then were hired into non-HR jobs after their internship ended, are not showing for users with our custom "GLB Exclude HR" security profile. It seems like once the system registers them as HR, no matter how their record changes, the security profile still