US 2019/0163928 A1 · SYSTEM AND METHOD FOR MANAGING ENTERPRISE DATA

Abstract

A system for managing personal data stored by an enterprise includes an interface, a permissions database, a processor, and non-transitory computer readable media. The interface is configured to receive a request to access at least some of the personal data, the request defining a purpose for the request. The permissions database that stores a plurality of records that define permissions associated with the personal data. The non-transitory computer readable media in communication with the processor that stores instruction code which, when executed by the processor, causes the processor to locate, within one or more disparate source databases within the enterprise, personal data associated with one or more individuals. For each individual, the processor generates a record in the permissions database that relates the individual to: a) attributes of the personal data; b) legal grounds information that defines process rights; c) one or more purposes for which the personal data may be used; and d) constraint information that defines limitations on the individual to modify or delete the personal data. The processor selects one or more records associated with a purpose that matches the purpose of the request. The processor retrieves personal data associated with attributes of the one or more records from the one or more disparate source databases. The processor then communicates, via the interface, the retrieved personal data to a requestor associated with the request.

Claims20

Dependent claims

A system for managing personal data stored by an enterprise, the system comprising:

an interface configured to receive a request to access at least some of the personal data, the request defining a purpose for the request;
a permissions database that stores a plurality of records that define permissions associated with the personal data;
a processor;
and
non-transitory computer readable media in communication with the processor that stores instruction code which, when executed by the processor, causes the processor to:
locate, within one or more disparate source databases within the enterprise, personal data associated with one or more individuals;
for each individual, generate a record in the permissions database that relates the individual to:
a) attributes of the personal data;
b) legal grounds information that defines process rights;
c) one or more purposes for which the personal data may be used;
and d) constraint information that defines limitations on the individual to modify or delete the personal data;
select one or more records associated with a purpose that matches the purpose of the request;
retrieve personal data associated with attributes of the one or more records from the one or more disparate source databases;
communicate, via the interface, the retrieved personal data to a requestor associated with the request.

11 more elements

A method for managing personal data stored by an enterprise, the method comprising:

receiving a request to access at least some of the personal data, the request defining a purpose for the request;
locating, within one or more disparate source databases within the enterprise, personal data associated with one or more individuals;
for each individual, generating a record in the permissions database that relates the individual to:
a) attributes of the personal data;
b) legal grounds information that defines process rights;
c) one or more purposes for which the personal data may be used;
and d) constraint information that defines limitations on the individual to modify or delete the personal data;
selecting one or more records associated with a purpose that matches the purpose of the request;
retrieving personal data associated with attributes of the one or more records from the one or more disparate source databases;
communicating, via an interface, the retrieved personal data to a requestor associated with the request.

7 more elements

A non-transitory computer readable medium that includes instruction code for managing personal data stored by an enterprise, the instruction code being executable by a machine for causing the machine to perform acts including:

receiving a request to access at least some of the personal data, the request defining a purpose for the request;
locating, within one or more disparate source databases within the enterprise, personal data associated with one or more individuals;
for each individual, generating a record in the permissions database that relates the individual to:
a) attributes of the personal data;
b) legal grounds information that defines process rights;
c) one or more purposes for which the personal data may be used;
and d) constraint information that defines limitations on the individual to modify or delete the personal data;
selecting one or more records associated with a purpose that matches the purpose of the request;
retrieving personal data associated with attributes of the one or more records from the one or more disparate source databases;
communicating, via an interface, the retrieved personal data to a requestor associated with the request.

7 more elements

Dependencies are inferred from the claim text.

System and method for managing enterprise data

Life of this patent

System and method for managing enterprise data

Life of this patent

Abstract

Claims20