Purpose-based data access control

An apparatus having a processor and coupled memory, the processor being adapted to perform:

• obtaining, for data of a subject, an approval for usage of the data for a use purpose, wherein the use purpose comprises a type of application of the data, wherein the approval does not approve usage of the data for another use purpose different than the use purpose, wherein the another use purpose comprises at least one different type of application of the data, wherein the data relates to the subject;
• obtaining an encryption key associated with the use purpose, wherein a decryption key is required for decrypting information encrypted with the encryption key;
• generating a link to a pointer, the pointer pointing to the data of the subject, the pointer being associated with the use purpose, wherein the link enables a computer to retrieve the pointer from a storage;
• encrypting the link to the pointer with the encryption key to obtain an encrypted link to the pointer;
• and
• providing access to the encrypted link, wherein said providing access to the encrypted link comprises publishing the encrypted link on a publicly accessible storage, whereby access to the data is obtainable by decrypting the encrypted link with the decryption key to obtain the pointer, and using the pointer to access the data of the subject.

A non-transitory computer readable medium retaining program instructions, which program instructions when read by a processor, cause the processor to perform:

• obtaining, for data of a subject, an approval for usage of the data for a use purpose, wherein the use purpose comprises a type of application of the data, wherein the approval does not approve usage of the data for another use purpose different than the use purpose, wherein the another use purpose comprises at least one different type of application of the data, wherein the data relates to the subject;
• obtaining an encryption key associated with the use purpose, wherein a decryption key is required for decrypting information encrypted with the encryption key;
• generating a link to a pointer, the pointer pointing to the data of the subject, the pointer being associated with the use purpose, wherein the link enables a computer to retrieve the pointer from a storage;
• encrypting the link to the pointer with the encryption key to obtain an encrypted link;
• and
• providing access to the encrypted link, wherein said providing access to the encrypted link comprises publishing the encrypted link on a publicly accessible storage, whereby access to the data is obtainable by decrypting the encrypted link with the decryption key to obtain the pointer, and using the pointer to access the data of the subject.