Abstract: A system and method for managing data are presented herein. The system includes a plurality of data sets, a plurality of data access policies, and a policy enforcer. The plurality of data sets can be stored in a data store on a server. The data access policies can each be associated with a single data set and can be captured in a workflow template and encapsulated with the data set. At least one of the data policies can use human evaluation. The policy enforcer can be configured to receive requests for data, to interpret the associated data policy, and to comply with the human evaluation of the data policies by spawning a child workflow defined in the data policy to initiate the human evaluation across a network.