Error correction for integrated data control ledgers

A data control method, comprising:

• receiving account status information from a provisioning service device, wherein the account status information comprises, wherein the provisioning service device is configured to modify a user account:
• an account identifier for the user account;
• and
• a first current status for the user account;
• sending a query to a plurality of data control devices using the account identifier to determine current status information for the user account from the status logs of the plurality of data control devices, wherein:
• each data control device is associated with a group within an enterprise;
• and
• each data control device comprises a memory operable to store a data control ledger that comprises a status log configured to store current status information for a plurality of user accounts;
• and
• the current status information comprises a current status for the user account from the status log of each data control device from among the plurality of data control devices;
• comparing the first current status for the user account from the provisioning service device to the current status information for the user account from the status logs of the plurality of data control devices;
• determining the first current status for the user account from the provisioning service device does not match a second current status of the user account from a status log of a first data control device from among the plurality of data control devices;
• and
• updating one of the status log of the first data control device and the provisioning service device in response to determining that the first current status for the user account from the provisioning service device does not match the second current status of the user account from that status log of the first data control device.

A computer program comprising executable instructions stored in a non-transitory computer readable medium that when executed by a processor causes the processor to:

• receive account status information from a provisioning service device, wherein the account status information comprises, wherein the provisioning service device is configured to modify a user account:
• an account identifier for the user account;
• and
• a first current status for the user account;
• send a query to a plurality of data control devices using the account identifier to determine current status information for the user account from the status logs of the plurality of data control devices, wherein:
• each data control device is associated with a group within an enterprise;
• and
• each data control device comprises a memory operable to store a data control ledger that comprises a status log configured to store current status information for a plurality of user accounts;
• and
• the current status information comprises a current status for the user account from the status log of each data control device from among the plurality of data control devices;
• compare the first current status for the user account from the provisioning service device to the current status information for the user account from the status logs of the plurality of data control devices;
• determine the first current status for the user account from the provisioning service device does not match a second current status of the user account from a status log of a first data control device from among the plurality of data control devices;
• and
• update one of the status log of the first data control device and the provisioning service device in response to determining that the first current status for the user account from the provisioning service device does not match the second current status of the user account from that status log of the first data control device.