# US 12,216,780 B2 · Managing purpose-based processing of data using a purpose agent > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,216,780 B2 - Document ID: US12216780B2 - Status: Granted - Kind: B2 - Application number: 17/546,351 - Filed: 2021-12-09 - Published: 2023-06-15 - Granted: 2025-02-04 - Earliest claimed: 2021-12-09 - Assignees: Sap SE - Applicants: Sap SE - Inventors: Diane Schmidt; Carsten Pluder - Web page: https://patentgrep.com/patent/US12216780B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 2221/2137: Time limited access, e.g. to a computer or data - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Computer-readable media, methods, and systems are disclosed for providing purpose-based processing of data. A purpose agent assigns one or more purposes to a set of data such that access to the set of data may be restricted to a select few specifically authorized entities based on an assigned purpose. A retention period for storing the data is determined based on the assigned purpose. When the retention period expires the data is deleted from a data store. ## Claims ### Claim 1 One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by a processor, perform a method for providing purpose-based processing within a data system, the method comprising: receiving a set of data within an application in communication with a purpose agent configured to receive a request to assign a purpose to received data, the set of data comprising personal data of a data subject; responsive to receiving the set of data, sending the set of data from the application to the purpose agent as the request to assign a purpose to received data; responsive to receiving the set of data at the purpose agent, initiating an asynchronous trigger event within the purpose agent, wherein the application continues to process additional sets of data without waiting for a reply from the purpose agent; assigning, using the purpose agent, a primary purpose to the set of data based on one or more predetermined purpose determination rules; in computer-readable storage, storing the primary purpose as associated with the set of data; determining a retention period for the set of data based on the assigned primary purpose; storing the set of data in a data store; restricting access to the set of data based on the assigned primary purpose; and after the retention period has expired, deleting the set of data from the data store. ### Claim 2 (depends on 1) The computer-readable media of claim 1, further comprising: assigning a complementary purpose to a portion of the set of data based on the one or more predetermined purpose determination rules; and determining a complementary retention period for the portion of the set of data based on the complementary purpose. ### Claim 3 (depends on 2) The computer-readable media of claim 2, wherein the portion of the set of data persists after the set of data is deleted based on the complementary retention period. ### Claim 4 (depends on 3) The computer-readable media of claim 3, wherein the complementary purpose is associated with a set of legal parameters for defining access to the portion set of data, and the complementary retention period is based at least in part on the set of legal parameters. ### Claim 5 (depends on 1) The computer-readable media of claim 1, wherein the primary purpose is associated with a set of user-defined parameters for defining access to the set of data. ### Claim 6 (depends on 1) The computer-readable media of claim 1, wherein the primary purpose is associated with a set of legal parameters for defining access to the set of data. ### Claim 7 (depends on 6) The computer-readable media of claim 6, wherein the retention period is based at least in part on the set of legal parameters. ### Claim 8 A method for providing purpose-based processing within a data system, the method comprising: receiving a set of data within an application, the set of data comprising personal data of a data subject; responsive to receiving the set of data, initiating an asynchronous trigger event within a purpose agent; requesting, by the purpose agent, data relating to a predecessor of the set of data; assigning, using the purpose agent, based on the predecessor of the set of data, a primary purpose to the set of data based on one or more predetermined purpose determination rules, the primary purpose defining access to the set of data, wherein the predecessor of the set of data comprises an updated or revised version of a document that is already stored and has already been assigned purpose, and a same purpose is assigned to the set of data as to the predecessor; determining a retention period for the set of data based on the assigned primary purpose; storing the set of data in a data store; restricting access to the set of data based on the assigned primary purpose; and after the retention period has expired, deleting the set of data from the data store. ### Claim 9 (depends on 8) The method of claim 8, wherein the set of data is retrieved from an existing set of personal data on the data store. ### Claim 10 (depends on 8) The method of claim 8, wherein the retention period comprises: a residence period during which processing of the set of data is available; and a blocking period during which changes to the set of data are prevented. ### Claim 11 (depends on 8) The method of claim 8, wherein the retention period is based at least in part on a legal requirement associated with the set of data. ### Claim 12 (depends on 8) The method of claim 8, wherein access to the set of data is restricted such that the set of data is accessible for the assigned primary purpose but is inaccessible for a subsequent purpose distinct from the assigned primary purpose. ### Claim 13 (depends on 8) The method of claim 8, wherein the purpose assignment is made retroactively on an existing set of data as part of a purpose implementation. ### Claim 14 (depends on 8) The method of claim 8, further comprising: assigning, using the purpose agent, a complementary purpose to the set of data based on the one or more predetermined purpose determination rules, the complementary purpose further defining access to the set of data. ### Claim 15 A method for providing purpose-based processing within a data system, the method comprising: receiving a set of data within an application in communication with a purpose agent configured to receive a request to assign a purpose to received data, the set of data comprising personal data of a data subject; responsive to receiving the set of data, sending the set of data from the application to the purpose agent as the request to assign a purpose to received data; responsive to receiving the set of data at the purpose agent, initiating an asynchronous trigger event within the purpose agent, wherein the application continues to process additional sets of data without waiting for a reply from the purpose agent; assigning, using the purpose agent, a first purpose to the set of data based on one or more predetermined purpose determination rules, the first purpose defining access to the set of data; in computer-readable storage, storing the first purpose as associated with the set of data; assigning, using the purpose agent, a second purpose to the set of data based on the one or more predetermined purpose determination rules, the second purpose further defining access to the set of data; determining a first retention period for the set of data based on the first purpose; determining a second retention period for the set of data based on the second purpose; storing the set of data in a data store; restricting access to the set of data based on one of the first purpose and the second purpose; and after both of the first retention period and the second retention period have expired, deleting the set of data from the data store. ### Claim 16 (depends on 15) The method of claim 15, further comprising: in response to determining that the first retention period has expired and the second retention period has not expired, restricting access to the set of data based on the second purpose such that the set of data is no longer accessible for the first purpose. ### Claim 17 (depends on 15) The method of claim 15, wherein the first purpose is a consent-based purpose such that access to the set of data is restricted based on data subject consent. ### Claim 18 (depends on 17) The method of claim 17, wherein the second purpose is legal-based purpose such that the second retention period is based on a set of legal parameters. ### Claim 19 (depends on 15) The method of claim 15, further comprising: assigning a complementary purpose to the set of data, the complementary purpose associated with the first purpose; and determining a complementary retention period for the set of data based on the complementary purpose. ### Claim 20 (depends on 19) The method of claim 19, wherein the complementary purpose is a legal-based purpose and the complementary retention period is based on a set of legal parameters.