Data access governance (DAG) is the discovery, classification, ownership, policy and review of access to structured and unstructured data. It focuses on questions such as who can access sensitive information, how that access was obtained and whether it is still justified.
IGA and DAG overlap: IGA commonly governs identities and application entitlements, while DAG adds data-level visibility such as folders, files, records and effective permissions.