Abstract: A computer-based method for creating enforced, context-specific sharing of ontologically mapped, aggregated medical data includes storing at least one data field in a database as an entity type ontology, receiving context-specific rule configurations corresponding to the entity type ontology, and identifying any conflict between the received context-specific rule and any applicable rule. The context-specific rule configurations include at least one context, one data source, and one entity type ontology data field. If a conflict is identified, the method receives resolution of the conflict and stores the context-specific rule configurations in the database.

Abstract: A system for managing data sharing and permissioning for a plurality of sensitive information across disparate entities and contexts. The system enables multiple tiers of permission rules that may vary by requesting user, specific data fields, and sharing context. The system provides patients or other users who provide data with an interface to select permission rules so that other users may access that data in a controlled manner. The system is capable of capturing and structuring the logic of written laws, consent agreements, and individual user preferences that enable or restrict data sharing among users. The system provides a requesting user with an interface to query the data about a patient or other entity, where data access is enabled by applicable rules. These rules may be set and controlled by the user, other users with permission to set access controls on the user's behalf, or any laws or consent agreements governing data sharing among users.