Hello, I don't if is the right approach but I solved the problem as follows:
1) Switch off the record rule res.partner.rule.private.employee.
2) Create a new record rule Own contacts for the Contact object that applies for read, write, create and delete
and uses ['|', ('type', '!=', 'private'), ('type', '=', False), ('user_id', '=', user.id)] as Domain Filter and Sale /User: Own Documents Only as Group.
3) Create a new record rule All contacts for the Contact object that applies for read, write, create and delete
and uses [(1, '!=', 1)] as Domain Filter and Sale /User: All Documents as Group.
In this way, I can restrict the users to see their own contacts and also keep the private address feature.
Suggestions are welcome. Regards.