Abstract: A system and method for storage and retrieval of information subject to authorization by a data controller that allows information for purchasing and other information exchange to occur only for authorized parties. A data subject place information about the data subject into a data repository controlled by a data controller. The data controller authorizes a data recipient to obtain that data subject data when authorized by a data subject. Such transactions as purchases of goods and services and applying for college admission are the types of transactions contemplated. The data repository places client software on the computer of the data recipient thereby signifying that the data recipient is authorized. Thereafter, the data recipient can receive information about the data subject when the data subject accepts and offer from the data recipient.