Definition
Purpose-Based Access Control grants data access based on the intended use of a request — not only identity/role — enforcing jurisdiction, consent, contract, and policy at the moment of use.
Key Points
- Core enforcement model in ethyca astralis for AI agents/models
- Paired with large-language-regulatory-model for automated assessments
- Aligns with agentic-data-control-plane and fides taxonomy