Employee Related Accounts

In the past we have requiredemployees to identify all accounts they own (primary or joint), and accounts of family members and close personal friends, so that the Credit Union can use system controls to restrict access to these accounts. We have a concern about requiring employees to identify account numbers of family/friends, due to member privacy and the employee's "need to know". If we do not collect that information, we cannot restrict employee access to the accounts (used to reducie potential fraud collusion). How do you handle accounts of employees' family and friends (where the employee is not a joint owner)?