If I understand your post correctly, this constraint on the repeating group’s data source should do the trick.
You should also consider adding a privacy rule to the Professional data type.
Professional