Make all the information accessible but restrict access based on User privileges. If some piece of information like endangered species location is to be known, user must identify himself/herself and then proceed to use the data. Anything happens to the endangered species, you know who all got access to that information. Similarly for other data.