Governing Data Access Without Overexposure