requirement for data to be available only to authorised users. keeps data private rather than to the public domain.
making sure that data is protected against unauthorized access
begins at the level of attributes, normalization is bottom-up; used in small databases with a few attributes