A computer-implemented method for managing data associated with a first user having a first user device and a second user having a second user device, the method comprising: storing, at a first system, secure data items jointly accessible by the first user and the second user; sending, via the first user device to a second system, which is remote and distinct from the first system, a message that is indicative of the first user providing their consent for the second system to access the secure data items from the first system; connecting the second system to the first system via an account request resource; redirecting the first user device to the first system with an account request identifier so as to correlate the account request resource with the first user device; authenticating the first user of the first user device at the first system; once the first user has been authenticated, receiving, at the first system from the first user device, a data request comprising a consent instruction to transmit the secure data items to the second system; identifying, at the first system, that the secure data items are jointly accessible by the first user and the second user; in response to identifying that the secure data items are jointly accessible by the first user and the second user, transmitting an authorisation request to the second user device, wherein the authorisation request comprises a prompt for the second user to authorise the data request; receiving, from the second user device, a grant message indicative of the second user granting the authorisation request; in response to receiving the grant message, transmitting the secure data items to the second system; and preventing the secure data items from being sent to the second system, if the grant message is not received. storing, at a first system, secure data items jointly accessible by the first user and the second user; sending, via the first user device to a second system, which is remote and distinct from the first system, a message that is indicative of the first user providing their consent for the second system to access the secure data items from the first system; connecting the second system to the first system via an account request resource; redirecting the first user device to the first system with an account request identifier so as to correlate the account request resource with the first user device; authenticating the first user of the first user device at the first system; once the first user has been authenticated, receiving, at the first system from the first user device, a data request comprising a consent instruction to transmit the secure data items to the second system; identifying, at the first system, that the secure data items are jointly accessible by the first user and the second user; in response to identifying that the secure data items are jointly accessible by the first user and the second user, transmitting an authorisation request to the second user device, wherein the authorisation request comprises a prompt for the second user to authorise the data request; receiving, from the second user device, a grant message indicative of the second user granting the authorisation request; in response to receiving the grant message, transmitting the secure data items to the second system; and preventing the secure data items from being sent to the second system, if the grant message is not received.