Answer
Limit access to the people who need the data for their role and review permissions when staff or project responsibilities change.
Explanation
Broad access creates unnecessary opportunities for accidental disclosure, curiosity browsing, or misuse. Access control is part of data minimisation after collection.