That would make definite sense and should be straightforward. Instead of sharing your data, you would generate a certificate with an expiration period with which they can access your personal data stored in the system. Ideally this would be short lived and require periodic regeneration.