Who can access sensitive information in a matter?

Only authorised users, based on strict role-based permissions and enhanced authentication controls.