Principle restricting access to information based on job requirements. Even with appropriate clearance, users only access data necessary for their specific role.