1. A method for automatically enforcing obligations in accordance with a data-handling policy, said data-handling policy comprising rules for access to data stored in a data repository and obligations based on said access to said data, said method comprising: intercepting a request by a user for accessing said data stored in said data repository; determining user access restrictions to said data according to said rules; providing requested data to said user upon successfully validating said user according to said rules; identifying an obligation associated with access to a specific data item, said obligation comprising a specified action invoked by said data-handling policy as a result of said access to said specific data item, and said obligation being associated with an appropriate time for execution; identifying rules in said data-handling policy having said obligation; generating a list of data access events, based on said rules, for associating the specific data item requested by said user with said obligation; and responsive to said requested data comprising said specific data item, automatically executing said obligation at said appropriate time after access to said specific data item requested by said user.