A system and method for data access control using narrative authentication questions can include a server containing a database storing login credentials for an account associated with a user, and the login credentials can include a narrative authentication question and an authentication response associated with the narrative authentication question. A system and method for data access control using narrative authentication questions can include a user device in data communication with the server, and the user device can receive and transmit user input from the user. Upon receipt of a request to access the account from the user, the server can transmit the narrative authentication question to the user device, receive a user input by the user transmitted from the user device in response to the narrative authentication question, compare the user input to the authentication response stored in the database, calculate a similarity score based on the comparison, and approve the user's request to access the account if the similarity score exceeds a threshold.