The subject technology provides systems and methods for logging data access by applications. A first process executing on an electronic device may receive an access request from a second process executing on the electronic device. The access request may include a request to access data corresponding to a protected data category. Subsequent to receiving the access request, the first process may determine whether the second process is authorized to access the data. In response to determining that the second process is authorized to access the data, the first process may grant the second process access to the data, and then generate and store log data corresponding to the access of the data by the second process.