Who can access sensitive case information?

Only authorized users, based on strict role-based permissions and strong authentication controls.