Code analysis for privacy and risk assessment using a trained machine-learning model

A non-transitory computer-readable storage medium storing instructions for code analysis, the instructions configured to be executed by one or more processors of a system to cause the system to:

• receive, from a first data owner system, a first input comprising an indication of one or more privacy constraints, wherein the one or more privacy constraints indicate one or more rules for operating on a sensitive data set in a data store associated with the first data owner system;
• receive, from a system authorized to access the data store, data comprising code configured to operate on the sensitive data set;
• apply a first set of one or more machine-learning-trained models to process the first input comprising the indication of the one or more privacy constraints and the data comprising the code to generate code analysis output data, wherein the code analysis output data comprises an indication of whether the code satisfies the one or more privacy constraints;
• and
• generate and transmit, based at least in part on the code analysis output data, an instruction for the system authorized to access the data store, the instruction indicating whether to execute the code to operate on the sensitive data.

A method for code analysis, the method configured to be performed by a system comprising one or more processors, the method comprising:

• receiving, from a first data owner system, a first input comprising an indication of one or more privacy constraints, wherein the one or more privacy constraints indicate one or more rules for operating on a sensitive data set in a data store associated with the first data owner system;
• receiving, from a system authorized to access the data store, data comprising code configured to operate on the sensitive data set;
• applying a first set of one or more machine-learning-trained models to process the first input comprising the indication of the one or more privacy constraints and the data comprising the code to generate code analysis output data, wherein the code analysis output data comprises an indication of whether the code satisfies the one or more privacy constraints;
• and
• generating and transmitting, based at least in part on the code analysis output data, an instruction for the system authorized to access the data store, the instruction indicating whether to execute the code to operate on the sensitive data.