Abstract: A method for defining the rights of access to user-specific data to be stored in the memory (MEM) of a communication device (1), which communication device comprises a user-specific authentication module (SIM) with an individual identification code. In connection with the storing of the data, the protection of the data is arranged on the basis of the identification code of the authentication module (SIM), wherein the data stored in the memory (MEM) of the device (1) is only accessible by using the identification code for the authentication module used for the storing of the data. Furthermore, the invention relates to a corresponding communication device, a computer program, and a software product.