Systems and methods for data protection

1. A data control system, comprising:

a database storing protected data; and

a central controller in data communication with the database, the central controller comprising a processor and a memory,

wherein, upon receipt from a requester of a data access request to access the protected data from the requester, the central controller is configured to:

request approval or disapproval of the data access request,

upon receipt of an approval of the data access request, the central controller is configured to:

request permission to provide protected data,

upon receipt of an approval of permission to provide protected data, the central controller is configured to:

retrieve the protected data from the database based on the data access request, and

transmit the protected data to the requester, and

upon receipt of a disapproval of permission to provide protected data, the central controller is configured to:

retrieve the protected data from the database based on the data access request,

generate sanitized results by removing at least a portion of the protected data, and

transmit the sanitized results to the requester.

2. The data control system of claim 1 , wherein the central controller is configured to generate sanitized results by applying one or more filters to the protected data.

3. The data control system of claim 1 , wherein the central controller removes at least a portion of the protected data by performing a cryptographic erasure.

4. The data control system of claim 1 , wherein the central controller removes at least a portion of the protected data by performing a data purge.

5. The data control system of claim 1 , wherein the central controller is configured to utilize a data sanitization application programming interface (API) to generate the sanitized results.

6. The data control system of claim 5 , wherein the data sanitization API is provided by a regulatory entity.

7. The data control system of claim 6 , wherein the central controller is configured to generate a data sanitization report for the sanitized results for audit by the regulatory entity.

8. The data control system of claim 7 , wherein the data sanitization report is a life cycle record for the protected data.

9. The data control system of claim 8 , wherein the life cycle record includes a usage log for the protected data.

10. The data control system of claim 1 , wherein the central controller is configured to generate a certificate of erasure for the protected data.

11. The data control system of claim 10 , wherein the certificate of erasure is tamper-proof and digitally signed by the central controller.

12. A data control method performed by a computer arrangement comprising a processor and a memory, the method comprising:

receiving from a requester a data access request to access protected data from the requester;

requesting approval or disapproval of the data access request;

upon receipt of an approval of the data access request, transmitting the protected data to the requester; and

upon receipt of a disapproval of the data access request:

requesting permission to provide the protected data,

upon receipt of an approval of permission to provide protected data:

retrieving the protected data based on the data access request, and

transmitting the protected data to the requester, and

upon receipt of a disapproval of permission to provide protected data:

retrieving the protected data based on the data access request,

generating sanitized results by removing at least a portion of the protected data, and

transmitting the sanitized results to the requester.

13. The data control method of claim 12 , further comprising:

prior to requesting approval or disapproval of the data access request, modifying the data access request according to one or more data usage rules.

14. The data control method of claim 13 , wherein the one or more data usage rules translate a first data format into a second data format.

15. The data control method of claim 13 , wherein the one or more data usage rules restrict the sanitized results to use for a single purpose.

16. The data control method of claim 13 , wherein the one or more data usage rules are data privacy rules.

17. The data control method of claim 13 , wherein the one or more data usage rules are business rules.

18. The data control method of claim 13 , wherein the one or more data usage rules are export rules.

19. The data control method of claim 13 , wherein:

the protected data is stored in a database located in a first jurisdiction, and

the one or more data usage rules comply with regulations applicable within the first jurisdiction.

20. A non-transitory computer-accessible medium having stored thereon computer-executable instructions, wherein upon execution by a computer arrangement comprising a processor, the instructions cause the computer arrangement to perform procedures, comprising:

receiving from a requester a data access request to access protected data from the requester;

requesting approval or disapproval of the data access request;

upon receipt of an approval of the data access request:

retrieving the protected data based on the data access request, and

transmitting the protected data to the requester; and

upon receipt of a disapproval of the data access request:

requesting permission to provide the protected data,

upon receipt of an approval of permission to provide protected data:

retrieving the protected data based on the data access request, and

transmitting the protected data to the requester, and

upon receipt of a disapproval of permission to provide protected data:

retrieving the protected data from the database based on the data access request,

generating sanitized results by removing at least a portion of the protected data, and

transmitting the sanitized results to the requester.