Managing purpose-based processing of data using a purpose agent
AssigneeSap SE
InventorsDiane Schmidt, Carsten Pluder
Life of this patent
Estimating the term…
Abstract
Computer-readable media, methods, and systems are disclosed for providing purpose-based processing of data. A purpose agent assigns one or more purposes to a set of data such that access to the set of data may be restricted to a select few specifically authorized entities based on an assigned purpose. A retention period for storing the data is determined based on the assigned purpose. When the retention period expires the data is deleted from a data store.
Claims20
One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method for providing purpose-based processing within a data system, the method comprising:
- receiving a set of data within an application in communication with a purpose agent configured to receive a request to assign a purpose to received data, the set of data comprising personal data of a data subject;
- responsive to receiving the set of data, sending the set of data from the application to the purpose agent as the request to assign a purpose to received data;
- responsive to receiving the set of data at the purpose agent, initiating an asynchronous trigger event within the purpose agent, wherein the application continues to process additional sets of data without waiting for a reply from the purpose agent;
- assigning, using the purpose agent, a primary purpose to the set of data based on one or more predetermined purpose determination rules;
- in computer-readable storage, storing the primary purpose as associated with the set of data;
- determining a retention period for the set of data based on the assigned primary purpose;
- storing the set of data in a data store;
- restricting access to the set of data based on the assigned primary purpose;
- and
- after the retention period has expired, deleting the set of data from the data store.
A method for providing purpose-based processing within a data system, the method comprising:
- receiving a set of data within an application, the set of data comprising personal data of a data subject;
- responsive to receiving the set of data, initiating an asynchronous trigger event within a purpose agent;
- requesting, by the purpose agent, data relating to a predecessor of the set of data;
- assigning, using the purpose agent, based on the predecessor of the set of data, a primary purpose to the set of data based on one or more predetermined purpose determination rules, the primary purpose defining access to the set of data, wherein the predecessor of the set of data comprises an updated or revised version of a document that is already stored and has already been assigned purpose, and a same purpose is assigned to the set of data as to the predecessor;
- determining a retention period for the set of data based on the assigned primary purpose;
- storing the set of data in a data store;
- restricting access to the set of data based on the assigned primary purpose;
- and
- after the retention period has expired, deleting the set of data from the data store.
A method for providing purpose-based processing within a data system, the method comprising:
- receiving a set of data within an application in communication with a purpose agent configured to receive a request to assign a purpose to received data, the set of data comprising personal data of a data subject;
- responsive to receiving the set of data, sending the set of data from the application to the purpose agent as the request to assign a purpose to received data;
- responsive to receiving the set of data at the purpose agent, initiating an asynchronous trigger event within the purpose agent, wherein the application continues to process additional sets of data without waiting for a reply from the purpose agent;
- assigning, using the purpose agent, a first purpose to the set of data based on one or more predetermined purpose determination rules, the first purpose defining access to the set of data;
- in computer-readable storage, storing the first purpose as associated with the set of data;
- assigning, using the purpose agent, a second purpose to the set of data based on the one or more predetermined purpose determination rules, the second purpose further defining access to the set of data;
- determining a first retention period for the set of data based on the first purpose;
- determining a second retention period for the set of data based on the second purpose;
- storing the set of data in a data store;
- restricting access to the set of data based on one of the first purpose and the second purpose;
- and
- after both of the first retention period and the second retention period have expired, deleting the set of data from the data store.
Dependencies are inferred from the claim text.