Protecting employee privacy in compliance with regulations