US 2026/0010647 A1Published application

System and method for managing personally identifiable information of an individual

AssigneeThe PNC Financial Services Group, Inc.

InventorsMark Anthony RAHIJA, Patrick HARTLEIB

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computer-implemented method for deleting an individual's personal data is provided. A request to delete the individual's personal data may be received from a communication device associated with the individual. The individual's identity may be verified. Responsive to verifying the individual's identity, the request may be compared with a data retention policy, wherein the data retention policy may comprise a data retention end date. If a date of the request is earlier than the data retention end date, a denial notification may be generated and transmitted to the communication device to notify the individual that the request is denied based on the data retention end date. Responsive to a determination that the date of the request is later than the data retention end date, the request to delete the individual's personal data from one or more associated databases may be processed.

Claims21

Dependent claims

A method comprising:

receiving, by a processor, a request to access personal data from a communication device associated with an individual;
logging the request in a transaction log by the processor, wherein the transaction log is used to prove compliance with privacy regulations and associated reporting requirements;
verifying an identity associated with the individual by the processor, wherein the verification includes a user authentication technique independently chosen from a password, multi-factor authentication, certificate-based authentication, biometric authentication, or token-based authentication;
responsive to verification of the identity:
scheduling one or more queries by the processor for retrieving the personal data from one or more data storage systems;
retrieving metadata associated with each of the one or more data storage systems;
responsive to the one or more queries, dynamically building a search request for the personal data in each of the one or more data storage systems based on the metadata, wherein the search request for each of the one or more data storage systems is built according to a format identified by the metadata and information from the request to access the personal data;
executing the dynamically built search request on each of the one or more data storage systems;
and
receiving a response from each of the one or more data storage systems by the processor, wherein:
the response includes the personal data from the one or more data storage systems;
data retrieved from the one or more data storage systems is formatted based on a template;
and
the formatted data is filtered to remove duplicate information;
and
updating the response including the personal data and the transaction log,
wherein the update is based on the formatting and the filtering;
and
wherein the update shows compliance with the privacy regulations.

16 more elements

A system comprising:

a processor:
a requestor device configured to access a data owner system associated with a data owner;
a memory storing instructions including a data retention policy accessed by the processor;
a plurality of data stores in communication with the processor;
and
an identity verification component configured to verify an identity of an individual;
wherein the processor includes a central processing unit, a graphics processing unit, an application-specific integrated circuit, a field programmable gate array, or any combination thereof, the processor configured to execute the stored instructions to:
implement an orchestrator component configured to coordinate data traffic to each of a plurality of services;
and
generate and maintain a queue configured to store a plurality of events;
wherein each of the plurality of services is configured to:
monitor the queue;
remove an event from the queue;
process the event, wherein the each of the plurality of services is configured to process one event at a time;
return results of the event to a central data store;
and
responsive to a determination of a failure to process the event:
flush any results related to the event;
place the event in a special queue;
and
reset a service of the plurality of services to enable the service to process a second event;
wherein the processor is further configured to instantiate a special service configured to:
monitor the special queue;
and
upon detecting that a special event is in the special queue, restage the special event from the special queue to the queue;
and
wherein the processor is further configured to instantiate a retry counter associated with the special event in the special queue, wherein the special service is further configured to:
on a condition that the retry counter is below a threshold, restage the special event from the special queue to the queue;
and
on a condition that the retry counter exceeds the threshold, flag the special event in the special queue for separate handling.

27 more elements

A method comprising:

instantiating a plurality of services by a processor;
instantiating an orchestrator component by the processor, wherein
the orchestrator component is configured to coordinate data traffic to each of a plurality of services;
instantiating a queue by the processor, the queue including a plurality of events including data to be processed;
monitoring the queue by each of the plurality of services;
removing a first event of the plurality of events from the queue by a first service of the plurality of services;
processing the first event by the first service;
returning results of the processing by the first service to a central data store;
on a condition that the first service indicates a failure to process the first event:
flushing the results by the processor;
placing the first event in a special queue by the processor;
and
resetting the first service by the processor to enable the first service to process a second event;
and
on a condition that the first service indicates a successful processing of the first event:
returning the results to the orchestrator component;
and
storing the results in the central data store.

15 more elements

Dependencies are inferred from the claim text.

Facts

Application: 19/329,348Filed 15 Sep 2025
Priority: 24 Feb 2023
Published: 8 Jan 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification3 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F
Computing and data processing

Family

Application63/486,806Us provisional application · filed 24 Feb 2023
Application18/584,648Continuation · filed 22 Feb 2024
Application19/329,348Continuation
US 12,762,262 B1Related patent
US 2026/0010647 A1This patent

From the US filing history. Foreign family members aren’t listed.