1. A method for automatically enforcing obligations in accordance with a data-handling policy, said method comprising: intercepting a request by a user for accessing data stored in a data repository; determining whether any obligations apply to each data item requested by said user in accordance with said data handling policy; and automatically executing said obligations at an appropriate time after access of said data.