Using a secure enclave to satisfy retention and expungement requirements with respect to private data

A system comprising:

• one or more processors;
• memory in electronic communication with the one or more processors;
• and
• instructions stored in the memory, the instructions being executable by the one or more processors to:
• store data, wherein the data contains personal information of one or more individuals and is subject to privacy requirements;
• encrypt the data such that the data becomes encrypted data, wherein only a secure enclave can decrypt the encrypted data using a first decryption key;
• generate, by the secure enclave, a report based on the encrypted data and a first set of added noise, wherein the report is subject to audit requirements and satisfies a differential privacy guarantee;
• store the encrypted data for a first period of time;
• aggregate, after the first period of time and by the secure enclave, the encrypted data and a second set of added noise to generate a private synopsis that satisfies the differential privacy guarantee;
• encrypt the private synopsis to generate an encrypted private synopsis, wherein only the secure enclave can decrypt the encrypted private synopsis using a second decryption key;
• expunge the encrypted data;
• and
• retain the encrypted private synopsis for a second period of time.

A non-transitory computer-readable medium comprising instructions that are executable by one or more processors to cause a computing system to:

• store data, wherein the data contains personal information of one or more individuals and is subject to privacy requirements;
• encrypt the data such that the data becomes encrypted data, wherein only a secure enclave can decrypt the encrypted data using a first decryption key;
• generate, by the secure enclave, a report based on the encrypted data and a first set of added noise, wherein the report is subject to audit requirements and satisfies a differential privacy guarantee;
• store the encrypted data for a first period of time;
• aggregate, after the first period of time and by the secure enclave, the encrypted data and a second set of added noise to generate a private synopsis that satisfies the differential privacy guarantee;
• encrypt the private synopsis to generate an encrypted private synopsis, wherein only the secure enclave can decrypt the encrypted private synopsis using a second decryption key;
• expunge the encrypted data;
• and
• retain the encrypted private synopsis for a second period of time.