Access levels are typically determined by a combination of institutional policies, project managers, and principal investigators. In academic settings, the Institutional Review Board (IRB) or a similar governing body may also play a role in determining access levels.