The Maccess.policy sub-domain governs consent, purpose of use, legal basis, access restrictions, delegation authority, and opt-out preferences for health data exchanges within MyHealth@MyHands. It defines the metadata rules determining under what legal and governance conditions a specific piece of health data may be accessed, by whom, and for what declared purpose.