our Org has a private Wide default settings. One custom profile doesn't have visibility on a particular Account recordtype (i.e. user with that profile can't read,cread,edit no records with that recordtype). The problem is this: users with that profile have visibility of some cases that are connected to account with that recordtype. In this way automatically the system gives visibility to that account even if the user should not see it.
How can I prevent this from happening?
The problem is connect with GDPR regulations. Thanks for help.