# US 10,311,826 B1 · Data-privacy management technique

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,311,826 B1
- Document ID: US10311826B1
- Status: Granted
- Kind: B1
- Application number: 16/013,268
- Filed: 2018-06-20
- Granted: 2019-06-04
- Earliest claimed: 2013-01-30
- Assignees: Intuit Inc.
- Applicants: Intuit Inc.
- Inventors: Alex G. Balazs
- Web page: https://patentgrep.com/patent/US10311826B1

## CPC

- G06Q 30/018: Certifying business or products
- G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes}
- G06Q 10/40: Business processes related to social networking or social networking services
- G06Q 50/00: Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism (healthcare informatics G16H)
- G09G 3/3648: {using an active matrix (G09G3/367 - G09G3/3696 take precedence)}
- G09G 3/3659: {the addressing of the pixel involving the control of two or more scan electrodes or two or more data electrodes, e.g. pixel voltage dependant on signal of two data electrodes}
- G09G 3/3696: {Generation of voltages supplied to electrode drivers}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G09G: ARRANGEMENTS OR CIRCUITS FOR CONTROL OF INDICATING DEVICES USING STATIC MEANS TO PRESENT VARIABLE INFORMATION (arrangements for transferring data between digital computers and displays G06F3/14; static indicating arrangements comprising an association of a number of separate sources or light control cells G09F9/00; static indicating arrangements comprising integral associations of a number of light sources H01J, H01K, H10H, H05B33/12; scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission, details thereof H04N1/00)

## Abstract

A technique for controlling release of data associated with an account is described. During this data-privacy management technique, a computer system provides at least a subset of data associated with an account to a third party based on a first consent (which may be received from a user of the account). This subset may have a first classification based on a taxonomy. Subsequently, the third party may notify the computer system that additional data has been derived from the data. In response, the computer system may determine a second classification of the additional data based on a taxonomy. If this second classification is other than a subset of the first classification, the computer system may request a second consent (for example, from the user).

## Claims

### Claim 1

A computer-implemented method for controlling release of data associated with a user of an account, the method comprising:
receiving the data from the user at a computer;
defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
receiving, from the user, at the computer, a first electronic consent for release of at least a subset of the data associated with the user to a third party, wherein the subset has a first classification based on the taxonomy;
storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing any of the data that has the first classification to the third party;
receiving a first request for accessing a first subset of the data from a first application of the third party, wherein the first application is executed on a first electronic platform; and
when the first application falls into one of the subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
receiving information from the third party about additional data derived from the first subset of the data by the third party;
determining a second classification of the additional data based on the taxonomy; and
if the second classification is other than a subset of the first classification, requesting, from the user, at the computer, a second electronic consent for release of the additional data to one or more other parties.

### Claim 3 (depends on 2)

The method of claim 2, further comprising receiving the second electronic consent from the user.

### Claim 4 (depends on 3)

The method of claim 3, further comprising providing authorization to the third party to release the additional data to other parties based on the second consent.

### Claim 5 (depends on 1)

The method of claim 1, wherein the data includes financial data.

### Claim 6

A non-transitory computer-readable storage medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform an operation for controlling release of data associated with a user of an account, the operation comprising:
receiving the data from the user at a computer;
defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
receiving, from the user, at the computer, a first electronic consent for release of at least a subset of the data associated with the user to a third party, wherein the subset has a first classification based on the taxonomy;
storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing any of the data that has the first classification to the third party;
receiving a first request for accessing a first subset of the data from a first application of the third party, wherein the first application is executed on a first electronic platform; and
when the first application falls into one of the subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.

### Claim 7 (depends on 6)

The non-transitory computer-readable storage medium of claim 6, wherein the operation further comprises:
receiving information from the third party about additional data derived from the first subset of the data by the third party;
determining a second classification of the additional data based on the taxonomy; and
if the second classification is other than a subset of the first classification, requesting, from the user, at the computer, a second electronic consent for release of the additional data to one or more other parties.

### Claim 8 (depends on 7)

The non-transitory computer-readable storage medium of claim 7, wherein the operation further comprises receiving the second electronic consent from the user.

### Claim 9 (depends on 8)

The non-transitory computer-readable storage medium of claim 8, wherein the operation further comprises providing authorization to the third party to release the additional data to other parties based on the second consent.

### Claim 10 (depends on 6)

The non-transitory computer-readable storage medium of claim 6, wherein the data includes financial data, the operation further comprising:
instructions for receiving a first consent for release of at least a subset of the data associated with the account to a third party, wherein the subset has a first classification based on a predefined taxonomy;
instructions for providing the subset of the data to the third party based on the first consent;
instructions for receiving information from the third party about additional data derived from the data by the third party;
instructions for determining a second classification of the additional data based on the predefined taxonomy; and
if the second classification is other than a subset of the first classification, instructions for providing a second consent.

### Claim 11

A computer system, comprising:
one or more processors; and
a non-transitory computer-readable storage medium storing instructions that, when executed by the one or more processors, cause the one or more processors to perform an operation for controlling release of data associated with a user of an account, the operation comprising:
receiving the data from the user at a computer;
defining a taxonomy for the data by defining a hierarchical set of classes and subclasses for the data based on shared characteristics of the data, wherein each class comprises respective subclasses of different electronic platforms utilizing the data;
receiving, from the user, at the computer, a first electronic consent for release of at least a subset of the data associated with the user to a third party, wherein the subset has a first classification based on the taxonomy;
storing, in a data structure at the computer, consent-information indicating that the user provided consent for releasing any of the data that has the first classification to the third party;
receiving a first request for accessing a first subset of the data from a first application of the third party, wherein the first application is executed on a first electronic platform; and
when the first application falls into one of the subclasses of different electronic platforms that belong to the first classification, providing the first subset of the data to the third party based on the first electronic consent.

### Claim 12 (depends on 11)

The computer system of claim 11, wherein the operation further comprises:
receiving information from the third party about additional data derived from the first subset of the data by the third party;
determining a second classification of the additional data based on the taxonomy; and
if the second classification is other than a subset of the first classification, requesting, from the user, at the computer, a second electronic consent for release of the additional data to one or more other parties.

### Claim 13 (depends on 12)

The computer system of claim 12, wherein the operation further comprises receiving the second electronic consent from the user.

### Claim 14 (depends on 13)

The computer system of claim 13, wherein the operation further comprises providing authorization to the third party to release the additional data to other parties based on the second consent.

### Claim 15 (depends on 11)

The computer system of claim 11, wherein the data includes financial data.