Deciding which data fields consumers, operators and authorities can see — tier by tier, with persona preview and a reviewer workflow.