A system and method for network policy enforcement for portable data devices such as smartphones, tablets or notebook computers uses the portable device to self-enforce prescribed policies. A beacon generator generates a wireless security beacon in accordance with an output of the beacon generator and a wireless data interface receives an access request from a portable data device. Digital security policy data configured to enable a preselected set of functions on the portable data device is stored in the data storage. The processor communicates the policy data to the portable data device in accordance with a received access request via the wireless data interface.