cp. Protect puts control of the data in the hands of the data owner/manager, including blinding privileged uses such as system administrators. This reduces the risk of insider threat and ensures privacy compliance such as required by many national data laws including GDPR in Europe.
whole story here.