Ensure users agree to access only required specific information

User must agree annually (via confidentiality reminder) to only access the specific information they have a business reason to access.