HR handles more sensitive personal data than almost any other function — yet governs it the least. Here’s how to structure people analytics without losing employee trust.