Abstract: A system for granting permission of a user's personal information to a third party includes a terminal unit for entering a personal information of a user and a permission information indicating at least one permissible use of the personal information of the user by a third party, for storing the personal information and the permission information entered, for receiving from the third party an item in accordance with the permission information stored therein from the third party, and an information management unit electrically connected to the terminal unit for managing the personal information and the permission information stored in the terminal unit, for evaluating the personal information stored therein in accordance with the permission information stored therein if an access to the personal information is requested from the third party, and for providing to the third party the requested personal information if the access to the requested personal information is permissible in accordance with a result