A computer-implemented method for granting purpose-based access to electronic datasets, the computer-implemented method comprising, by one or more hardware processors executing program instructions: receiving, from a user via a data discovery user interface, a request to access individual data items associated with a plurality of datasets, wherein the data discovery user interface displays summarized data associated with the plurality of datasets and prevents access to the individual data items comprised within the datasets; wherein each of the datasets is associated with a permission level, wherein at least a first permission level requires authorization from a first owner of a first dataset associated with the first permission level before individual data items of the first dataset are accessible to the user; iteratively receiving, from the user via the data discovery user interface, filter criteria (210, 220) to be applied to the summarized datasets, the filter criteria being usable to determine a cohort of datasets from the plurality of datasets matching the filter criteria, wherein after each change to the filter criteria the data discovery user interface is updated to indicate the cohort of datasets matching the updated filter criteria while preventing access to the individual data items of the datasets matching the filter criteria; receiving, from the user via the data discovery user interface, an investigation purpose for which access to individual data items of the cohort of datasets matching the filter criteria is requested; for each dataset of the cohort of datasets matching the filter criteria: determining a permission level; determining a data owner of the dataset that is authorized to grant the user access to the dataset; transmitting an access request to the determined data owner of the dataset requesting authorization for the user to access the dataset for the investigation purpose; generating an investigation dataset comprising at least a portion of individual data items of datasets for which the respective data owner authorized access; and providing the user access to the investigation dataset. receiving, from a user via a data discovery user interface, a request to access individual data items associated with a plurality of datasets, wherein the data discovery user interface displays summarized data associated with the plurality of datasets and prevents access to the individual data items comprised within the datasets; wherein each of the datasets is associated with a permission level, wherein at least a first permission level requires authorization from a first owner of a first dataset associated with the first permission level before individual data items of the first dataset are accessible to the user; iteratively receiving, from the user via the data discovery user interface, filter criteria (210, 220) to be applied to the summarized datasets, the filter criteria being usable to determine a cohort of datasets from the plurality of datasets matching the filter criteria, wherein after each change to the filter criteria the data discovery user interface is updated to indicate the cohort of datasets matching the updated filter criteria while preventing access to the individual data items of the datasets matching the filter criteria; receiving, from the user via the data discovery user interface, an investigation purpose for which access to individual data items of the cohort of datasets matching the filter criteria is requested; for each dataset of the cohort of datasets matching the filter criteria: determining a permission level; determining a data owner of the dataset that is authorized to grant the user access to the dataset; transmitting an access request to the determined data owner of the dataset requesting authorization for the user to access the dataset for the investigation purpose; generating an investigation dataset comprising at least a portion of individual data items of datasets for which the respective data owner authorized access; and providing the user access to the investigation dataset. determining a permission level; determining a data owner of the dataset that is authorized to grant the user access to the dataset; transmitting an access request to the determined data owner of the dataset requesting authorization for the user to access the dataset for the investigation purpose; generating an investigation dataset comprising at least a portion of individual data items of datasets for which the respective data owner authorized access; and providing the user access to the investigation dataset.