Data Access Controls (DAC)

As of 2026-05-29

DAC = row + column security in Datasphere, mandatory for GDPR Art. 5/9 + EU AI Act Art. 10. Senior pattern: 1 permission entity per dimension in foundation space (PE_COUNTRY, PE_BU, PE_ENTITY), inherited across domain models. User attributes flow from IAS, not maintained in Datasphere. Index permission keys; expect 5-15 % latency overhead. Skip DAC and face 200-800 person-day remediation per high-risk system.