In HCM, Emergency Contacts are searchable by staff through Person Management

We have noticed that employee's emergency contacts are searchable (by other employees in HR) through Person Management / Search (by name). Is this standard functionality, and is the result of the user doing the search having a security profile that allows them to see other people's emergency contacts? If so, what unique role in their profile allows this (to see other employee's emergency contact data)?

Also, is the recommended way to identify these as emergency contacts/dependents (and not employees) by their lack of a work assignment value?

Thank you