In a corporate environment, a network administrator is tasked with enhancing security by implementing network segmentation. The organization has multiple departments, including HR, Finance, and IT, each requiring different levels of access to sensitive data. The administrator decides to use VLANs (Virtual Local Area Networks) to separate the traffic of these departments. If the HR department needs to access a shared database that contains sensitive employee information, while the Finance department requires access to financial records, what is the most effective approach to ensure that the HR department can access the database without exposing the Finance department\'s data to unnecessary risk?