Security settings on employee files

When we give a manager (or deputy) access to the system ie planner they have access to all employee personal data. We don't allow this for GDPR reasons, even more so with the deputy. The deputy also has access to the performance data info, some of whom aren't even in their team. As such we are having serious thoughts about allowing access at deputy level to approve annual leave so they do not have access.

Please will you increase your security setting so that we can set these up in admin