Data access management system for relational accountability orchestration (pre-print)

As we enter the next decade of FAIR with advanced artificial intelligence to analyse and interpret valuable data, we must have interoperable authorisation processes to ensure proper data management practice. In this article, we describe the Resource Entitlement Management System (REMS) software. REMS provides a generic workflow engine that translates ethical, legal, and cultural requirements into actionable permissions. REMS manages the relational accountability for data protection between data applicants, authorisation bodies, and data holders. REMS introduces configurable levels of automation while keeping human oversight intact. Once a Data Access Committee (DAC) approves a request, REMS issues a permission in a standard format (e.g. GA4GH Visa) and logs the entire process for auditing. REMS operates across diverse regulatory and federated landscapes, utilizing global standards and metadata (e.g., OIDC, GA4GH, W3.org) to programmatically enforce controlled access. It facilitates sensitive data management aligned with FAIR principles, supporting initiatives including the European Genomic Data Infrastructure (GDI), Genome of Europe, CADRE, the ZERO childhood cancer portal, and various national biobanks and language repositories. Crucially, streamlining access must respect cultural safety and data sovereignty. The Rakeiora platform (Aotearoa New Zealand) exemplifies how technical standards can uphold indigenous governance; by integrating Māori values, the project demonstrates that community-led oversight is essential for building trust in digital infrastructure.