Limitations to Access in Charter

Hi! I created an Internal Audit charter and reviewed it with my Supervisory Committee last month. When it comes to access to all records, personnel, and areas of the credit union, do you have any limitations in place on things you cannot have access to?

Specifically, are you able to review SARs upon request? Do you have any limits with HR & personnel files?

Any insight is greatly appreciated. Thank you!