A series of measures (either technical or physical) which allow personal data to be accessed on a need-to-know basis.