Distributed customer data management network handling personally identifiable information

A network for managing personally identifiable information exchanged between computer systems in jurisdictions having different rules regarding handling personally identifiable information comprising:

• a plurality of regional servers residing in a plurality of respective jurisdictions with each regional server comprising:
• a first set of jurisdictional rules that define personally identifiable information for the respective jurisdiction;
• a first computer application that inputs data, that applies the first set of jurisdictional rules to the data and that outputs a first data set that is personally identifiable information and a second data set that is not personally identifiable information;
• a first data repository in communication with the first computer application that stores data that have been input but that have not had the first set of jurisdictional rules applied;
• a second data repository in communication with the first computer application that stores the first data set;
• a first set of masking rules for masking the first data set;
• and
• a second computer application in communication with the first computer application that interprets and applies the first set of masking rules to obfuscate the first data set;
• a recipient computer located in one of the plurality of jurisdictions that inputs data conforming to the respective set of jurisdictional rules that define personally identifiable information for the respective jurisdiction;
• and
• a central computer in communication with the plurality of regional servers and the recipient computer comprising:
• a rules interpreter that inputs the first data set, that applies the set of jurisdictional rules for the recipient computer to the first data set and that outputs a third data set of personally identifiable information conforming to the set of jurisdictional rules for the recipient computer;
• and
• one or more administrative rules for supporting creation, specification and management of personally identifiable information attributes with attribute values.

A method for distributing personally identifiable information comprising:

• providing a regional server located in a first jurisdiction comprising:
• defining personally identifiable information for the first jurisdiction with a first set of jurisdictional rules;
• executing a first computer application to input data, to apply the first set of jurisdictional rules to the data and to output a first data set that is personally identifiable information and a second data set that is not personally identifiable information;
• providing a first data repository in communication with the first computer application that stores data that have been input but that have not had the first set of jurisdictional rules applied;
• providing a second data repository in communication with the first computer application that stores the first data set;
• defining a first set of masking rules for masking the first data set;
• and
• executing a second computer application in communication with the first computer application that interprets and applies the first set of masking rules to obfuscate the first data set;
• providing a recipient computer located in a second jurisdiction that inputs data conforming to a second set of jurisdictional rules that define personally identifiable information for the second jurisdiction;
• and
• providing a central computer in communication with the regional server and the recipient computer comprising:
• executing a rules interpreter to input the first data set, to apply the second set of jurisdictional rules to the first data set and to outputs a third data set of personally identifiable information conforming to the second set of jurisdictional rules;
• and
• one or more treatment rules for the treatment of personally identifiable information attribute values that control an allowable use of data defined by the treatment rules and how data is masked.