Data access control refers to security measures that regulate who can view, edit, or delete CRM data based on roles and permissions. Organizations implement access control policies to prevent unauthorized modifications, protect sensitive customer information, and comply with data privacy regulations. Role-based access control (RBAC) is commonly used in CRMs, ensuring that only authorized employees can access specific data sets. For example, a sales representative may only have access to their assigned accounts, while an administrator can manage all CRM records. Multi-factor authentication (MFA), audit logs, and encryption further enhance data security. Proper access control prevents data breaches, improves accountability, and ensures compliance with industry standards such as GDPR and HIPAA.