Abstract: Methods and systems for secure geolocation-based data access control include a server that captures a data access request from a remote device and determines whether the requestor geolocation corresponds to a non-restricted zone or a restricted zone. The server determines whether the requestor identity has permission to receive a full view or a masked view of data. The server retrieves data responsive to the data query and generates a response to the data access request, the response including a full view or a masked view of the retrieved data. When the generated response comprises a masked view, the server determines that the user of the remote device has requested a full view of the responsive data, authenticates the remote device using the requestor identity, and updates the generated response to comprise the full view of the retrieved data. The server device transmits the generated response to the remote device.