RBW improves record security and privacy by orders-of-magnitude. In many cases, RBW has potential for a thousandfold+ improvement in record security. It works by restricting access to records based on need-to-know as determined by stage in a case management workflow. It solves the problem of overly broad access to information that is associated with traditional role-based access control.