Read Restrictions and Catalog Labels: Unifying governance across engines and catalogs

This post details the introduction of two new Apache Iceberg™ specifications: read restrictions and catalog labels. Read restrictions standardize delegated enforcement of access controls across different engines, ensuring consistent policy application. Catalog labels provide a portable context for governance metadata, allowing labels to travel with the data across engines and catalogs. The post discusses the technical implementation of these features and their role in unifying governance within the Databricks Lakehouse.