Since XACML is an attribute based language, organizations may need to do some work to improve the care and maintenance of privilege giving attributes.
If a request comes into the PDP that Alice, a doctor, wants to update a patient record - the PDP may need to find out more information on Alice.