Method and system for enforcing user policy on database records

A method for enforcing user policy to control access of sensitive data stored in a database, wherein the method comprising one or more steps of:

• receiving a query to retrieve data stored in the database using a receiving module;
• parsing the received query using a query parsing module;
• generating a sensitive tree from metadata of the database using a sensitive tree generator module;
• analyzing sensitivity of the parsed query using sensitive tree by a query analyzing module;
• re-writing the received query using the sensitive tree by are-writing module;
• managing one or more preferences of one or more data subjects using a preference manager module, wherein the one or more preferences are set on the sensitive fields of the database;
• and
• enforcing one or more preferences related to the sensitive data using a preference enforcement module, wherein the preference enforcement module is configured to notify data subjects according to the preference document to protect sensitive data stored in database.

A computer readable medium storing instructions for enforcing user policy to control access of sensitive data stored in a database, the instructions comprise:

• receiving a query to retrieve data stored in the database using a receiving module;
• parsing the received query using a query parsing module;
• generating a sensitive tree from metadata of the database using a sensitive tree generator module;
• analyzing sensitivity of the parsed query using sensitive tree by a query analyzing module;
• re-writing the received query using the sensitive tree by are-writing module;
• managing one or more preferences of one or more data subjects using a preference manager module, wherein the one or more preferences are set on the sensitive fields of the database;
• and
• enforcing one or more preferences related to the sensitive data using a preference enforcement module, wherein the preference enforcement module is configured to notify data subjects according to the preference document to protect sensitive data stored in database.