Back to DPDPA Glossary Index
Section 8(5); Rule 6Security & Safeguards
Access Control & Least Privilege
Access control limits who and what can read, change or disclose personal data.
Meaning and legal context
The Rules address appropriate access controls. Least privilege, account reviews and service-account restrictions are practical implementations; no single identity product is mandated.
Practical application
Review privileged roles and remove access when responsibilities end.
Related concepts
Official sources and editorial review
Prepared by DPDPA Shield. Explanations are plain-language summaries; the cited legislation controls. Last reviewed .
Put privacy knowledge into practice
Explore consent, data inventory and rights-request workflows with DPDPA Shield.