Data security and access management are highly technical topics that have largely been left to the Chief Information Security Officer and his team. While the PoPIA commencement date came into effect from 1 February 2022, more stakeholders need to understand the basic access control approaches available to them.