A computer implemented method of managing consent for sharing data, the method comprising: storing data sharing preferences for a data subject in relation to data held by a plurality of data controllers; receiving a data share request from a requestor to obtain personal data relating to the data subject and held by one or more of the data controllers; comparing the data share request to the data sharing preferences of the data subject; and for each of the one or more data controllers: instructing the one or more data controllers to share the personal data with the requestor, or rejecting the data share request, in dependence on the comparison.