Adaptive Access Governance in Healthcare

Insider-originated breaches remain the predominant vector of data compromise in healthcare. Traditional role-based access control (RBAC) offers limited responsiveness to dynamic clinical workflows. This paper presents an adaptive access governance model integrating RBAC, attribute-based, and risk-based authorisation with continuous behavioural anomaly detection. Contextual factors including temporal patterns, device provenance, geolocation, and record sensitivity are incorporated into real-time access logic supported by dynamic risk scoring. Validation in simulated and operational environments demonstrates reduced inappropriate access events and enhanced alignment with GDPR, HIPAA, and ISO/IEC 27001.