Restricted Personally Identifying Information

When name, email, etc. are collected via single sign on, it would be ideal to be able to expand the ability to mark data fields as restricted and thus masked from collaborators who shouldn't have access. We are doing COVID symptom tracking and staff names/email are populated via LDAP. Unfortunately this means that we can't give access to collaborators to run their own reports because we can't hide the identity of the people - which is not allowable by HIPAA - we also have to collect the information and have it available in the system for potential contact tracing.