2.3.3 Define the 'Data Access Separation Level'