HR’s role in ensuring employee privacy