Compliance and privacy enforcement (CAPE): AI planning based data subject request (DSR) processing system and methods

A server comprising:

• memory for storing compliance data relating to Compliance Data Subject Requests (DSR);
• a processor;
• and
• one or more non-transitory, machine-readable medium having instructions thereon, the instructions when executed by a processor to:
• provide an executable planning model that comprises a DSR domain description language, a DSR action description language, a plurality of DSR problem descriptions, a plurality of predetermined logical, relational, and temporal constraints and a plurality of dependency constraints;
• wherein the DSR domain description language includes an object hierarchy representing various objects and their inter-relationship within a domain, the domain comprising a network of servers that are administratively related and coupled, and user-accessible by each of a plurality of users;
• wherein the DSR action description language includes at least DELETE, REMOVE, OBFUSCATE, ENCRYPT, and ANONYMIZE, and at least one or more of MARK NOT USE, MARK NOT SHARE, and MARK NOT PROFILE actions;
• and
• wherein the DSR problem descriptions each correspond to an operation that operates upon a compliance object using at least one of the DSR actions;
• receive from one of the plurality of users at the network a user DSR that includes therein a user object on which DSR processing is required;
• and
• automatically process the user DSR by executing the executable planning model in the network, and wherein the executable planning model automatically implements an automatically derived set of lower-level machine-executable atomic DSR actions corresponding to the user DSR.

A system comprising:

• one or more data store for storing compliance data relating to Compliance Data Subject Requests (DSRs);
• a compliance server, wherein the one or more data servers and the compliance server comprise a domain that is administratively related and coupled, and user-accessible by each of a plurality of users,
• the compliance server comprising:
• memory for storing compliance data relating to DSRs;
• a processor;
• and
• one or more non-transitory, machine-readable medium having instructions thereon, the instructions when executed by a processor to:
• provide an executable planning model that comprises a DSR domain description language, a DSR action description language, a plurality of DSR problem descriptions, a plurality of predetermined logical, relational, and temporal constraints and a plurality of dependency constraints;
• wherein the DSR domain description language includes an object hierarchy representing various objects and their inter-relationships within the domain;
• wherein the DSR action description language includes at least DELETE, REMOVE, OBFUSCATE, ENCRYPT, and ANONYMIZE, and at least one or more of MARK NOT USE, MARK NOT SHARE, and MARK NOT PROFILE actions;
• and
• wherein the DSR problem descriptions each correspond to an operation that operates upon a compliance object using at least one of the DSR actions;
• receive from one of the plurality of users at the domain a user DSR that includes therein a user object on which DSR processing is required;
• and
• automatically process the user DSR by executing the executable planning model in the domain, and wherein the executable planning model automatically implements an automatically derived set of lower-level machine-executable atomic DSR actions corresponding to the user DSR.