You need to protect highly sensitive data in BigQuery. Your operations teams require access to the data, but due to privacy regulations, they must be unable to read sensitive fields like email addresses and first names. These specific sensitive fields should only be accessible to the Human Resources team on a need-to-know basis. What is the recommended approach?