Token-based data authority management

A method comprising:

• obtaining, at a device, a first token indicating that a first entity has data authority of a first data object;
• receiving, at the device, a data authority request from a second entity to transfer data authority of the first data object to the second entity;
• based on determining that a data authority transfer criterion is satisfied, generating a second token indicating that the second entity has the data authority of the first data object;
• and
• generating, at the device, a first reference indicating that the second token is related and subsequent to the first token.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• obtain a first token that indicates that a first entity has data authority of a first data object;
• receive a data authority request from a second entity to transfer the data authority of the first data object to the second entity;
• based on a determination that a data authority transfer criterion is satisfied, generate a second token that indicates that the second entity has the data authority of the first data object;
• and
• generate a first reference that indicates that the second token is related and subsequent to the first token.