System for authorising data access

A data management system for sharing data associated with a first user, the data management system comprising:

• a data storage resource configured to:
• store user data associated with the first user;
• store an authorised entity database comprising a plurality of authorised entity labels each indicative of an identifier of an authorised entity;
• and
• store an unauthorised entity database comprising a plurality of unauthorised entity labels each indicative of an identifier of an unauthorised entity;
• and
• wherein the data management system further comprises processing circuitry configured to:
• receive a first access message, from a remote system, associated with a request for access to the user data stored at the first system, the first access message comprising a remote system label indicative of an identifier of the remote system;
• compare the remote system label with the plurality of authorised entity labels and the plurality of unauthorised entity labels stored at the first system, in response to receiving the first access message;
• transmit a grant message indicative that the request for access is granted, in response to identifying that the remote system label matches an authorised entity label and that the remote system label does not match an unauthorised entity label;
• and
• prevent transmission of the grant message, if the remote system label in the first access message matches an unauthorised entity label and/or does not match an authorised entity label.