A computer-implemented method of restricting access to a data owner's data comprising the steps of storing a record associated with a data owner; receiving a request to protect data from the data owner; protecting the data by way of encryption, tokenization or other data protection mechanism; returning the data in a protected format to the data owner; receiving a request from the data owner to change the accessibility of the data owner's data; and changing the accessibility of the data owner's data.