Data Storage Security
Authorization object B_CCARD can be used to control access to credit card information that is stored in the business partner. This control falls in the area of responsibility of central SAP Business Partner.
You can protect employee data by using authorization groups (authorization object B_BUPA_GRP).