Systems and methods for managing workflow transactions including protected personal data in regulated computing environments

A method for managing workflow transactions including protected personal data (PPD) in a regulated computing environment, the method comprising:

• registering a first network group for a first application, wherein the first network group includes users authorized to view the PPD;
• determining, by the first application, that a workflow transaction record of the first network group includes the PPD;
• transmitting, by the first application, a packet to a second application, wherein:
• the packet includes:
• a data identification record, a header, and a PPD payload including the PPD associated with the workflow transaction record;
• and
• the second application is uniquely subscribed to by the first application;
• encrypting, by the second application, the PPD payload and the data identification record, wherein the encrypting includes stateless key management;
• transmitting, by the second application:
• an encrypted PPD payload, an encrypted data identification record, and the unencrypted header, to a system log database;
• querying, by a second network group including users not authorized to view the PPD, the system log database for data contained in the unencrypted header;
• decrypting, by a third application and in response to the query by the second network group, the encrypted PPD payload, wherein:
• the third application is uniquely subscribed to by the second network group;
• and
• the decrypting includes assigning a security definition to a decrypted PPD payload for subsequent viewing thereof by the second network group;
• and
• transmitting, by the third application:
• the decrypted PPD payload to the second network group.

A non-transitory computer-readable storage medium including processor-executable instructions stored as software therein to manage workflow transactions including protected personal data (PPD) in a regulated computing environment, which, when executed by one or more processors, cause the one or more processors to:

• determine, by a first application of the processor-executable instructions, that a workflow transaction record of a first network group includes the PPD, wherein the first network group includes users authorized to view the PPD;
• in response to determining that the workflow transaction record includes the PPD, transmit, by the first application, a packet to a second application of the processor-executable instructions, wherein the packet includes:
• a data identification record, a header, and a PPD payload including the PPD associated with the workflow transaction record;
• encrypt, by the second application, the PPD payload and the data identification record;
• transmit, by the second application:
• an encrypted PPD payload, an encrypted data identification record, and the unencrypted header, to a system log database;
• decrypt, by a third application of the processor-executable instructions and in response to a query of the system log database by a second network group for data contained in the unencrypted header, the encrypted PPD payload, wherein the second network group includes users not authorized to view the PPD;
• and
• transmit, by the third application, a decrypted PPD payload to the second network group.