Smart cities

Several departments use a shared city data platform. Which access policy best supports responsible access to sensitive operational records?