Personal Data Security using Address Book

We are looking into using the data privacy feature thru Address Book to secure search type 'E' (employees), 'A' (applicants) and 'X' (terminated employees) information in who's who etc.  What we are finding a userid or role cannot be assigned to more than one Permissions List Name. Therefore, we can only secure one search type from that userid or role, not all three search types.

Does anyone have a 'workaround' they are using for this situation?

Thanks for your input!