Requests must be approved by a Data Steward and the relevant Data Trustee. No access to Level 2–4 data is granted without completed training. Stewards are responsible for validating business needs and maintaining access logs.