• Digitalisation drives more channels, more data and more users. Yet, the law stipulates data minimisation, security and privacy by design an a clear “purpose" for the use of data
• Role Based Access Control (RBAC) has reached its limits as the pre-dominate and de facto authorisation model. A new more business centric and data-driven authorisation model is required to support a lean and modern organisation that can participate in a collaborative business environment
• Dynamic and fine-grained authorisation supports a consistent and unified way to handle sophisticated access control requirements such as “purpose of use”, risk, contract, consent and delegation
