Honestly, if its concerning personal data held by hr I would expect locks on the cabinets. At most places you cannot sneeze in HR without running into security.