ACCESS CONTROL FOR USER-RELATED DATA

摘要

The subject matter of this specification can be embodied in, among other things, a computer-implemented method for controlling access to user-related data including electronically registering a plurality of data providers with a computer-implemented data exchange. The method further includes electronically registering a plurality of data buyers with the computer-implemented data exchange. The method further includes mediating a data sharing arrangement between one or more of the data buyers and one or more of the data providers, the data sharing arrangement defining prices and permitted uses of data provided by the one or more data providers to the one or more data buyers. The method further includes enforcing, on behalf of the one or more data providers, one or more restrictions imposed by the data sharing arrangement on the one or more data buyers.