Dataadgangen

Dataadgangen, a Danish term meaning data access, refers to the set of policies, processes, and technical controls that determine who may view, modify, or share data within an information system. It covers personal and non-personal data and applies across databases, file stores, APIs, cloud services, and analytics platforms. The goal is to ensure data accessibility for authorized users while protecting confidentiality, integrity, and compliance.

Core components of dataadgangen include authentication, which verifies identities; authorization, which grants permissions; and ongoing access control, which enforces least privilege and need-to-know principles. Common models include RBAC, ABAC, and DAC. Access rights are managed through IAM systems and are reviewed regularly to prevent drift.

Governance plays a central role: data owners, stewards, and security teams define policies for access and how it is requested, approved, and revoked. Data classification, data loss prevention, and audit trails support accountability and risk management.

Privacy and legal considerations are integral. In the EU, access to personal data must comply with GDPR and national laws, emphasizing data minimization, consent when required, and the right to access. Monitoring and logging enable traceability and incident response, while reviews help detect excessive privileges and respond to issues.

Technical challenges include avoiding over-privilege, insider threats, and shadow IT. Balancing accessibility with security requires clear policies, automated controls, and regular audits.