Who can see PAN and bank details?

They are hidden on every page, apart from the last few characters. Admins and HR can click Reveal full PAN & bank details on a record; each reveal is logged and shows in the audit log.