Abstract: In a method for controlling access by a mobile device to data, at least one parameter is associated with the mobile device is defined. At least one rule for allowing access to the data is defined. The rule is based on a value of the at least one parameter. The parameter is accessed from the mobile device when the mobile device requests access to the data. If the values of the parameters indicate that access to the data is allowable, then the mobile device access is granted to the data. Otherwise if the values of the parameters indicate that access to the data is not allowable, then the mobile device is denied access to the data.