Abstract: Systems and methods for accessing patient data include, in response to a request for consent for a medical professional to access patient data of a patient, receiving a request from the patient for a token validating an identity of the patient. The token is transmitted to the patient. The consent is received from the patient with data access attributes using the token. The data access attributes include an expiration time associated with the consent and a granular level of access defining one or more subsets of the patient data the medical professional is authorized to access. A notification is transmitted to a communication address associated with the medical professional. The notification indicates that the medical professional is authorized to access the patient data in accordance with the data access attributes.