Data-privacy management technique

A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform an operation for controlling release of data associated with a user of an account, the operation comprising:

• receiving the data from the user at a computer;
• defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
• receiving, from the user, at the computer, a first electronic consent for release of at least a subset of the data associated with the user to a third party, wherein the subset has a first classification based on the taxonomy;
• storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing any of the data that has the first classification to the third party;
• receiving a first request for accessing a first subset of the data from a first application of the third party, wherein the first application is executed on a first electronic platform;
• and
• when the first application falls into one of the subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.

A computer system, comprising:

• one or more processors;
• and
• a non-transitory computer-readable storage medium storing instructions that, when executed by the one or more processors, cause the one or more processors to perform an operation for controlling release of data associated with a user of an account, the operation comprising:
• receiving the data from the user at a computer;
• defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
• receiving, from the user, at the computer, a first electronic consent for release of at least a subset of the data associated with the user to a third party, wherein the subset has a first classification based on the taxonomy;
• storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing any of the data that has the first classification to the third party;
• receiving a first request for accessing a first subset of the data from a first application of the third party, wherein the first application is executed on a first electronic platform;
• and
• when the first application falls into one of the subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.