Abstract: Computer-implemented methods and systems are provided for controlling access to restricted customer data (RCD) by a computer associated with a particular user of an enterprise while the particular user is interacting with a particular customer. The RCD is associated with the particular customer and stored in an enterprise database. An enterprise server (ES) monitors for an indication that the particular customer has sent a request to interact with a user of the enterprise. In response to receiving the indication at the ES, the ES can determine that the particular user accepted the request. The ES can then automatically modify the particular user's access privileges grant access to the RCD. When the ES receives another indication that interaction with the particular customer has ended, the ES can automatically revoke the particular user's access to the RCD.