In the traditional model, once authenticated, a user receives all secure data. ABE enables moving beyond that “all or nothing” model so that policies rather than individuals determine access. That could mean, in practice, that a doctor reviews health records, the hospital business office looks at insurance data, and insurance companies see something else.