This is a two-part question, the first part is probably relevant to more individuals than the second part.

1 - How do your organizations do data governance (ensuring that the right employee has access to the data they need and nothing more) on structured data backends (sql, mongo etc) or data warehouses (bigquery, redshift etc). Is it basic ACL on a per-backend basis, is it more intricate?

2 - For companies which leverage sensitive client information to build better products, how do you anonymize the data appropriately ensuring you remain compliant.

I am equally interested in individual tools/solutions your organizations may use, as well as processes/frameworks or even using 3rd parties/consultants.