US 2019/0197217 A1 · Management Systems for Personal Identifying Data, and Methods Relating Thereto

Abstract

Systems and methods are provided for managing personal identifying information (PII). An exemplary method includes receiving, from a requestor, a request related to PII for an individual. In connection therewith, a computing device determines whether a restriction on the PII or the individual applies to the request, and then broadcasts the request, subject to the determined restriction, to a service provider of a service associated with the individual where the service provider is a controller of PII of the individual. The computing device also compiles a reply to the request, based on a response from the service provider, where the reply includes the PII, and transmits the reply to the requestor. The computing device then logs multiple interactions related to the request in an audit data structure, thereby permitting compliance with PII controls to be demonstrated.

Claims20

Dependent claims

A computer-implemented method for use in managing personal identifying information, the method comprising:

receiving, from a requestor, a request related to personal identifying information (PII) for at least one individual, the at least one individual associated with a service;
determining, by a computing device, whether a restriction on the PII or the at least one individual applies to the request;
broadcasting, by the computing device, the request, subject to the determined restriction when the restriction is determined to apply to the request, to at least one service provider of the service, the at least one service provider being a controller of PII of the at least one individual;
compiling, by the computing device, a reply to the request based on a response from the at least one service provider, the reply including the PII;
transmitting the reply to the requestor;
and
logging, by the computing device, multiple interactions related to the request in an audit data structure, thereby permitting compliance with PII controls to be demonstrated.

4 more elements

A non-transitory computer-readable storage media including executable instructions for managing personal identifying information, which when executed by at least one processor, cause the at least one processor to:

receive, from a requestor, a request related to personal identifying information (PII) for at least one individual, the at least one individual associated with at least one service;
determine whether a restriction on the PII or the at least one individual applies to the request;
broadcast the request, subject to the determined restriction, to at least one service provider of the at least one service, the at least one service provider being a controller of PII of the at least one individual;
receive at least one response to the request, from the at least one service provider of the at least one service;
compile a reply to the request based on the received at least one response, the reply including the PII;
and
transmit the reply to the requestor.

4 more elements

Dependencies are inferred from the claim text.

Management Systems for Personal Identifying Data, and Methods Relating Thereto

Life of this patent

Management Systems for Personal Identifying Data, and Methods Relating Thereto

Life of this patent

Abstract

Claims20