Information processing system, information processing method, and program

Abstract

To provide an information processing system, an information processing method, and a program.SOLUTION: In information processing in an information processing system, a client device transmits, on the basis of an operation by an operator, a request to display an information input screen to a server device. The server device generates, when receiving the request to display the information input screen, the information input screen and transmits the generated information input screen to the client device of a request source. The client device displays, when receiving the information input screen, the information input screen on an output unit and transmits input information to the server device. The server device stores the input information in a predetermined storage area such as a storage unit, determines, on the basis of the stored input information and a predetermined determination logic, whether or not a privacy impact assessment needs to be conducted, generates an output screen including a determination result stored in the predetermined storage area, and transmits the output screen to the client device of the request source. The client device displays the output screen on the output unit.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] Patent Document 1 describes generating a privacy impact assessment. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-102062 Summary of the Invention [Problem to be solved by the invention]

[0004] As the number of cases requiring privacy impact assessments increased, the burden of the assessment work became too great for the personnel or organizations involved in determining whether or not a privacy impact assessment was required. [Means for solving the problem]

[0005] According to one aspect of the present disclosure, there is provided an information processing system. The information processing system has at least one or more control units. The control units perform control to display a screen in response to a request. The screen is configured to allow input of information about a solution. The solution is a candidate for a privacy impact assessment. The control unit determines whether or not a privacy impact assessment of the solution is necessary based on the information input via the screen, and outputs the result of the determination. [Brief explanation of the drawings]

[0006] [Figure 1] FIG. 1 is a diagram illustrating an example of a system configuration of an information processing system. [Figure 2] FIG. 2 is a diagram illustrating an example of a hardware configuration of the server device. [Figure 3] FIG. 3 is a diagram illustrating an example of a hardware configuration of the client device. [Figure 4] FIG. 4 is a sequence diagram illustrating an example of information processing in the information processing system. [Figure 5] FIG. 5 is a diagram showing an example of the information input screen. [Figure 6] FIG. 6 is a diagram showing an example of the output screen. [Figure 7] FIG. 7 is a diagram showing an example of the report output screen. [Figure 8] FIG. 8 is a diagram showing an example of the judgment logic setting screen. DETAILED DESCRIPTION OF THE INVENTION

[0007] Hereinafter, the embodiments will be described with reference to the drawings. Various features shown in the following embodiments (including the modified examples shown below, the same applies hereinafter) can be combined with each other.

[0008] <Embodiment 1> 1. System Configuration Fig. 1 is a diagram illustrating an example of a system configuration of an information processing system 1000. As illustrated in Fig. 1, the information processing system 1000 includes at least a server device 100, a client device 110, and a client device 120 as a system configuration. The server device 100, the client device 110, and the client device 120 are communicatively connected via a network 150. The network 150 includes a wired LAN and a wireless LAN. The information processing system 1000 is a so-called SaaS (Software as a Service) information processing system.

[0009] Client device 110 and client device 120 have a web browser, connect to server device 100 via the web browser, display screens on the web browser, and accept operations from the operator via the screens displayed on the web browser.

[0010] The client device 110 is a device operated, for example, by a person in charge of a business division in a company. The person in charge operates the client device 110 to access the server device 100, input information about a solution to be planned or developed, and obtain a determination as to whether or not a privacy impact assessment is required. Here, a solution is a candidate for a privacy impact assessment, and is a concept that includes, for example, a system, a product, or a service (measures for utilizing personal data). However, for simplicity of explanation, the following description will use a system as an example of a solution. Here, a system refers to a comprehensive mechanism that combines various elements, such as computers and other electronic devices, software, communication networks, and data, and performs some function as a whole. A product refers to a product and / or service offered on the market.

[0011] The client device 120 is a device operated by, for example, a person in the legal department of a company. The legal department person operates the client device 120 to access the server device 100 and change the logic for determining, for example, whether or not to conduct a privacy impact assessment. Logic is the rules and / or procedures that define how a program operates. Logic includes processing flow, conditional branching, loop processing, data manipulation, etc.

[0012] The server device 100 executes the main processes of the embodiment shown below. More specific processes in the server device 100 will be described later.

[0013] For simplicity, only one client device 110 and one client device 120 are shown in FIG. 1, but the information processing system 1000 may include a plurality of client devices 110 and 120.

[0014] Here, the claimed information processing system may be composed of multiple devices or may be composed of a single device. When the claimed information processing system is composed of a single device, an example of that device is server device 100. When the claimed information processing system is composed of a plurality of devices, an example of the plurality of devices is a cloud system that provides the functions of server device 100, or server device 100 and client devices (client device 110 and / or client device 120). A cloud system is composed of, for example, a plurality of server devices.

[0015] 2. Hardware Configuration (1) Hardware Configuration of Server Device 100 2 is a diagram showing an example of the hardware configuration of server device 100. Server device 100 includes, as its hardware configuration, a control unit 210, a storage unit 220, a communication unit 230, and a communication bus 240. Control unit 210, storage unit 220, and communication unit 230 are electrically connected via communication bus 240.

[0016] The control unit 210 is a CPU (Central Processing Unit) or the like, and controls the entire server device 100 .

[0017] The memory unit 220 is either an HDD (Hard Disk Drive), ROM (Read Only Memory), RAM (Random Access Memory), SSD (Solid State Drive), or any combination thereof, and stores programs and data (e.g., information about systems to be planned or developed) used by the control unit 210 when executing processing based on the programs.

[0018] The control unit 210 reads out a program stored in the storage unit 220 and executes processing based on the read program, thereby realizing the processing of the server device 100 and the functions of the server device 100. The storage unit 220 is an example of a storage medium. Note that, in the first embodiment, the data used when the control unit 210 executes processing based on the program is described as being stored in the storage unit 220, but the data may also be stored in a storage unit of another device that can communicate with the server device 100. In other words, the data may be stored in a storage unit of any device as long as the data can be referenced and / or acquired by the control unit 210.

[0019] The communication unit 230 connects the server device 100 to the network 150 and controls communication with other devices. The communication may be performed via wired or wireless communication, or may be performed via both.

[0020] The number of hardware components constituting the server device 100 is not limited to one, and two or more may exist as necessary. Also, the server device 100 may have hardware components other than those shown in Fig. 2. The same applies to the client devices described below.

[0021] (2) Hardware Configuration of the Client Device 110 3 is a diagram showing an example of the hardware configuration of client device 110. Client device 110 includes, as its hardware configuration, a control unit 310, a storage unit 320, an input unit 330, an output unit 340, and a communication unit 350. Control unit 310, storage unit 320, input unit 330, output unit 340, and communication unit 350 are electrically connected via a communication bus 360.

[0022] The control unit 310 is a CPU or the like, and controls the entire client device 110 . The storage unit 320 is any one of a ROM, a RAM, an SSD, or any combination thereof, and stores programs, data used when the control unit 310 executes processing based on the programs, etc. The control unit 310 reads out the programs stored in the storage unit 320 and executes processing based on the read out programs, thereby realizing the functions of the client device 110, etc.

[0023] The input unit 330 is a device that inputs information to the client device 110 in response to an operation by an operator. The input unit 330 accepts an operation input made by the operator. The operation input is transferred as a command signal to the control unit 310 via the communication bus 360. The control unit 310 may execute predetermined control or calculation based on the transferred command signal as necessary. The input unit 330 may be included in the housing of the client device 110 or may be externally attached. For example, the input unit 330 may be implemented as a touch panel integrated with the output unit 340. When the input unit 330 is implemented as a touch panel, the operator can input operations such as tapping and swiping to the input unit 330. Instead of a touch panel, a switch button, a mouse, a trackpad, a QWERTY keyboard, or the like can be used as the input unit 330.

[0024] The output unit 340 is, for example, a display, and is a device that outputs information as a screen of a graphical user interface (GUI) that can be operated by an operator. The output unit 340 may be included in the housing of the client device 110, or may be externally attached. More specifically, the output unit 340 may be implemented as a display device such as a CRT display, a liquid crystal display, an organic EL display, or a plasma display. It is preferable that these display devices are implemented by selectively using them depending on the type of client device 110.

[0025] The communication unit 350 connects the client device 110 to the network 150 and controls communication with other devices. The communication may be performed via wired or wireless communication, or both.

[0026] The hardware configuration of client device 120 is also substantially the same as that of client device 110. The functions of client device 120 are realized by the control unit of client device 120 executing processing based on a program stored in the memory unit of client device 120.

[0027] 1, client device 110 and client device 120 are illustrated as PCs (Personal Computers), but are not limited to PCs and may be, for example, smartphones, tablet computers, etc. Client device 110 and client device 120 may be any device that can display a screen described below and allows information to be input based on an operator's operation.

[0028] 3. Information Processing The information processing according to the first embodiment will be described below. (1) Overview of the process In response to a request, the control unit 210 controls the output unit 340 of the client device 110 to display a screen. The screen is configured to allow information about the system to be input. The system is a candidate for a privacy impact assessment. Details of the screen displayed on the output unit 340 of the client device 110 will be explained later using FIG. 5 and other figures. The control unit 210 determines whether or not a privacy impact assessment of the system is necessary based on the information input via the screen, and outputs the result of the determination. By performing such processing, it is possible to obtain the results of whether or not a privacy impact assessment is necessary for a system that is to be planned or developed, without placing a burden on the person or organization involved in determining whether or not a privacy impact assessment is necessary.

[0029] (2) Details of the processing FIG. 4 is a sequence diagram showing an example of information processing in the information processing system 1000. As shown in FIG. In sequence SQ401, control unit 310 of client device 110, based on an operation by an operator, transmits a display request for an information input screen to server device 100. For example, when a URL (Uniform Resource Locator) for the information input screen is entered in a predetermined area of ​​a web browser, control unit 310 transmits a display request for the information input screen to server device 100.

[0030] Upon receiving the request to display the information input screen, in sequence SQ402, control unit 210 of server apparatus 100 generates an information input screen.

[0031] In sequence SQ403, control unit 210 transmits the generated information input screen to client device 110 that has made the request.

[0032] When the information input screen is received, control unit 310 displays the information input screen on output unit 340 in sequence SQ404. In the present specification, the server device 100 generates a screen and transmits it to the client device. The client device then displays the received screen. However, the server device 100 may transmit data necessary for generating the screen to the client device. The client device may then generate and display the screen based on the received data.

[0033] 5 is a diagram showing an example of information input screen 500. Information input screen 500 includes drop-down list 510, drop-down list 520, drop-down list 530, drop-down list 540, drop-down list 550, drop-down list 560, drop-down list 570, drop-down list 580, drop-down list 590, and drop-down list 595.

[0034] Drop-down list 510 is an example of a GUI component that allows the user to select whether or not child data is handled. Child data is data related to children, such as data related to abuse, poverty, school absenteeism, bullying, and young carers. Information on whether or not child data is handled is an example of information related to the data handled by the system. Drop-down list 520 is an example of a GUI component that allows a user to select whether or not financial-related data is handled. Financial-related data is data related to finance, and includes, for example, bank account data, ordinary transaction data, credit card withdrawal data, etc. Information on whether or not financial-related data is handled is an example of information related to the data handled by the system. Drop-down list 530 is an example of a GUI component that allows a user to select whether medical-related data is handled. Medical-related data is data related to medical care, and includes, for example, information such as the patient's name, age, sex, address, and telephone number, the patient's medical history, medication history, allergy history, medical examination records (medical chart information), records of vital data (body temperature, blood pressure, pulse rate, respiratory rate, etc.), records of image data (X-ray image data, CT image data, MRI image data, etc.), and genetic information. Information on whether medical-related data is handled is an example of information related to the data handled by the system.

[0035] Drop-down list 540 is an example of a GUI component that allows a user to select whether or not information and communication data is handled. Information and communication data is information transmitted in the form of an electrical signal, an optical signal, or the like, and includes, for example, audio data, video data, character data, numeric data, image data, etc. Information on whether or not information and communication data is handled is an example of information related to the data handled by the system. Drop-down list 550 is an example of a GUI component that allows a user to select whether or not sensitive personal data is being handled. Sensitive personal data is personal information that includes information such as the individual's race, creed, social status, medical history, criminal history, facts of having suffered harm as a result of a crime, and other descriptions specified by government ordinance as requiring special consideration in handling to prevent unfair discrimination, prejudice, or other disadvantages against the individual. Information on whether sensitive personal data is being handled is an example of information about the data handled by the system.

[0036] Drop-down list 560 is an example of a GUI component that allows users to select whether or not information bank services are available. Information bank services allow individuals to provide their personal data to companies, etc., limiting the purpose of use, and receive points or other benefits in return. Information on whether or not information bank services are available is an example of information related to use cases in which the system will be used. Drop-down list 570 is an example of a GUI component that allows a user to select whether the system is for a highly public project. Examples of highly public projects include infrastructure projects and social welfare projects. Examples of infrastructure projects include lifelines such as electricity, gas, and water, as well as transportation, communications, and postal services. Examples of social welfare projects include welfare assistance projects, child welfare projects, elderly welfare projects, and welfare projects for the disabled. Information on whether the system is for a highly public project is an example of information related to the use cases in which the system will be used.

[0037] Drop-down list 580 is an example of a GUI component that allows a user to select whether the system is for building (learning) a machine learning model or for utilizing the built machine learning model. Information on whether the system is for building (learning) a machine learning model or for utilizing the built machine learning model is an example of information related to information processing in the system. Drop-down list 590 is an example of a GUI component that allows a user to select whether or not the system implements profiling. Profiling is a process that analyzes an individual's attribute data and / or behavioral history data to estimate that person's characteristics and / or preferences. Information on whether or not the system implements profiling is an example of information related to information processing in the system.

[0038] Drop-down list 595 is an example of a GUI component that allows a user to select the amount of data handled by the system. The amount of data may be indicated by volume or by number of items. However, for the sake of simplicity, the following description will be given assuming that the amount of data is indicated by number of items. Information about the amount of data handled by the system is an example of information about the amount of data handled by the system.

[0039] In other words, the information about the system that can be entered on the screen shown in Figure 5 includes at least information about the data handled by the system, information about the use cases in which the system is used, information about information processing in the system, or information about the amount of data handled by the system.

[0040] Drop-down list 510, drop-down list 520, drop-down list 530, drop-down list 540, drop-down list 550, drop-down list 560, drop-down list 570, drop-down list 580, drop-down list 590, and drop-down list 595 are each an example of a GUI component. The GUI component is not limited to a drop-down list as long as it is configured to allow input of information required to determine whether or not a PIA (Privacy Impact Assessment) needs to be performed. For example, the GUI component may be a check box, a radio button, or a toggle button.

[0041] Drop down list 510, drop down list 520, drop down list 530, drop down list 540, drop down list 550, drop down list 560, drop down list 570, drop down list 580, and drop down list 590 may be any GUI component that allows the selection of "Yes" or "No" (Yes or No). Drop down list 595 may be any GUI component that allows the selection of the amount of data. That is, the configuration of the information input screen is not limited to that shown in FIG. 5, and any configuration is possible as long as it allows the input of information necessary for the decision logic.

[0042] When receiving information input via a screen such as that shown in FIG. 5, control unit 310 transmits the input information (hereinafter also simply referred to as input information) to server apparatus 100 in sequence SQ405.

[0043] Upon receiving the input information, in sequence SQ406, control unit 210 stores the input information in a predetermined storage area such as storage unit 220.

[0044] In sequence SQ407, the control unit 210 determines whether or not a privacy impact assessment needs to be conducted based on the input information stored in a predetermined storage area such as the storage unit 220 and predetermined determination logic. This process is an example of a process for determining whether or not a privacy impact assessment needs to be conducted based on the information input via the information input screen 500 and predetermined determination logic. The logic refers to rules that define how the control unit 210 operates based on a program. The determination logic refers to rules that define when the control unit 210 determines, based on the information input via the information input screen 500 based on a program, that a privacy impact assessment needs to be conducted and when a privacy impact assessment should not be conducted. An example of the determination logic is as follows: " Information about the data handled by the system Information about the use cases in which the system will be used Information about the processing of information in the system - Amount of data handled by the system If at least two of the above conditions are met, it is determined that a PIA is required. "

[0045] The determination logic may be written in the program itself, or may be written in an executable file or the like stored in the storage unit 220 or the like. If the determination logic is written in an executable file or the like, the control unit 210 reads the executable file and determines whether or not a privacy impact assessment needs to be performed based on the description in the executable file. For the sake of simplicity, the description in this specification will be given assuming that the determination logic is written in the executable file. For example, when the determination logic is as described above, the control unit 210 determines, based on the input information and the determination logic, whether or not the conditions are met for at least two or more of the following requirements included in the input information: information about the data handled by the system, information about the use case in which the system is used, information about information processing in the system, and the amount of data handled by the system. If the conditions for two or more requirements are met, the control unit 210 determines that PIA is necessary. If the conditions for two or more requirements are not met, the control unit 210 determines that PIA is not necessary. The control unit 210 stores the determination result and the basis for the determination in a predetermined storage area such as the storage unit 220.

[0046] In sequence SQ408, control unit 210 generates an output screen including the determination results stored in a predetermined storage area. In sequence SQ409, control unit 210 transmits the generated output screen to client device 110 that has made the request.

[0047] Upon receiving the output screen, control unit 310 displays the output screen on output unit 340 in sequence SQ410.

[0048] FIG. 6 is a diagram showing an example of an output screen 600. As shown in FIG. 6, the output screen 600 includes a determination result (determination result) 610. In the example of FIG. 6, the determination result 610 includes "PIA implementation required." This indicates that a PIA is required for the relevant system. The output screen 600 also includes a determination basis 620. The determination basis 620 is information indicating the basis for the determination result shown in the determination result 610. In the example of FIG. 6, it is shown that a determination that a PIA is required has been made because all of the following requirements are met: " Information about the data handled by the system Information about the use cases in which the system will be used Information about the processing of information in the system - Amount of data handled by the system " By outputting a screen such as that shown in output screen 600, the operator of client device 110 can obtain the basis for the determination along with the result of the determination.

[0049] The output screen 600 includes a report output button 630. When information indicating that the report output button 630 has been selected is received from the client device 110, the control unit 210 generates a report related to the determination of whether or not PIA is required. The report is generated in a predetermined file format and may be stored in a predetermined storage area such as the storage unit 220, or may be generated in a format included in the screen. For the sake of simplicity, the following description will be given assuming that the report is generated in a format included in the screen (hereinafter also referred to as the report output screen). The output screen of FIG. 6 is an example, and any configuration may be used as long as the result of the determination and the basis for the determination are included.

[0050] FIG. 7 is a diagram showing an example of a report output screen 700. The report output screen 700 includes a determination result (determination result) 710. In the example of FIG. 7, the determination result 710 includes "PIA implementation required." This indicates that PIA implementation is required for the relevant system. The report output screen 700 includes a determination basis 720. The determination basis 720 is information indicating the basis for the determination result indicated in the determination result 710. The report output screen 700 includes information 730 input via the information input screen 500. The example of FIG. 7 shows that the following information has been input via the information input screen 500: " ·Children's data handling: Yes · Financial data handling: No ·Handling of medical-related data: Yes ·Handling of information and communication data: Yes · Handling of sensitive personal information: None Information banking services: None Public-interest projects: Yes Machine learning model construction or utilization: Yes Profiling: Yes Data volume: 50,000 or less " As shown in FIG. 7, the report output screen 700 may be configured to be able to identify whether the information entered via the information input screen 500 relates to "data handled by the system," "use cases in which the system is used," "information processing in the system," or "amount of data handled by the system." The report output screen of FIG. 7 is an example, and any configuration may be used as long as the result of the determination and the information input via the information input screen 500 are included.

[0051] In addition, in response to a request from a client device 120 of a user with certain authority, such as a legal department employee in a company, the control unit 210 may generate a screen for setting and changing the decision logic as shown in FIG. 8 (hereinafter simply referred to as the decision logic setting screen) and send it to the requesting client device 120.

[0052] Fig. 8 is a diagram showing an example of a judgment logic setting screen 800. As shown in Fig. 8, the judgment logic setting screen 800 includes an input area 810. The input area 810 is an area for inputting instruction information for instructing the setting and change of judgment logic. In the example of Fig. 8, the instruction information is as follows: " - At least one piece of information about the data handled by the system is "present"; There is at least one use case for which the system will be used. - At least one piece of information about information processing in the system is "present"; The system handles more than 30,000 pieces of data. If at least one of the above conditions is met, it is determined that a PIA is required. "

[0053] When instruction information is input into input area 810 and save button 820 is selected, control unit 310 transmits a request to set and change the judgment logic, including the instruction information, to server device 100. Based on the instruction information included in the request to set and change the judgment logic, control unit 210 of server device 100 sets the judgment logic, or changes the judgment logic if it has already been set. These processes are examples of processes that accept an operation to change the judgment logic and change the judgment logic in response to the operation. 8 shows an example of changing the judgment logic depending on the input items in FIG. 5, but judgment logic may be freely input, for example, when setting a new judgment logic, etc. In such a configuration, the control unit 210 generates and displays an information input screen 500 according to the set judgment logic.

[0054] 8 shows a configuration in which linguistic information such as a character string is input as instruction information for setting and changing the judgment logic, but the control unit 210 may output, for example, a flowchart or pseudocode of the set judgment logic.The control unit 210 may then change the judgment logic based on the flowchart or pseudocode changed via the screen.

[0055] As described above, according to this embodiment, business department personnel can input information about a solution that is planned to be planned or developed on a screen, and obtain a determination as to whether or not a privacy impact assessment of the solution is necessary, thereby reducing the burden on personnel or organizations involved in determining whether or not a privacy impact assessment is necessary.

[0056] <Additional Notes> The invention may be provided in the following aspects:

[0057] (Appendix 1) An information processing system, having at least one or more control units, The control unit Controls the display of the screen on demand, the screen is configured to allow input of information about a solution; the solution is a candidate for a privacy impact assessment; Determine whether or not to conduct a privacy impact assessment of the solution based on the information entered via the screen; Output the result of the judgment. Information processing system. (Appendix 2) 10. The information processing system of claim 1, The information about the solution that can be entered on this screen includes: at least, Information about the data handled by said solution; Information about the use cases in which the solution is used; Information regarding the information processing in said solution; Or information about the amount of data handled by the solution. Contains, Information processing system. (Appendix 3) 10. The information processing system of claim 1, The control unit Output the reason for the judgment along with the result of the judgment. Information processing system. (Appendix 4) 10. The information processing system of claim 1, The control unit outputting the information input via the screen together with the judgment result; Information processing system. (Appendix 5) 10. The information processing system of claim 1, The control unit determining whether or not to conduct a privacy impact assessment based on the information input via the screen and a predetermined determination logic; Information processing system. (Appendix 6) 6. The information processing system according to claim 5, The control unit Accepting an operation to change the determination logic; changing the determination logic in response to the change operation; Information processing system. (Appendix 7) An information processing method executed by an information processing system, Controls the display of the screen on demand, the screen is configured to allow input of information about a solution; the solution is a candidate for a privacy impact assessment; Determine whether or not to conduct a privacy impact assessment of the solution based on the information entered via the screen; Output the result of the judgment. Information processing methods. (Appendix 8) A program, Computer, A program for causing the information processing system according to any one of claims 1 to 6 to function as such.

[0058] Finally, while various embodiments of the present invention have been described, these are presented by way of example only and are not intended to limit the scope of the invention. The novel embodiments may be embodied in various other forms, and various omissions, substitutions, and modifications may be made without departing from the spirit of the invention. The embodiments and their modifications are intended to be included within the scope and spirit of the invention, as well as within the scope of the inventions and their equivalents as defined in the appended claims. [Explanation of symbols]

[0059] 100: Server device 110: Client device 120: Client device 150: Network 210: Control unit 220: Storage section 230: Communications Department 1000: Information Processing Systems

Claims

1. An information processing system, having at least one or more control units, The control unit Controls the display of the screen on demand, the screen is configured to allow input of information about a solution; the solution is a candidate for a privacy impact assessment; Determine whether or not to conduct a privacy impact assessment of the solution based on the information entered via the screen; Output the result of the judgment. Information processing system.

2. 2. The information processing system according to claim 1, The information about the solution that can be entered on this screen includes: at least, Information about the data handled by said solution; Information about the use cases in which the solution is used; Information regarding the information processing in said solution; Or information about the amount of data handled by the solution. Contains, Information processing system.

3. 2. The information processing system according to claim 1, The control unit Output the reason for the judgment along with the result of the judgment. Information processing system.

4. 2. The information processing system according to claim 1, The control unit outputting the information input via the screen together with the judgment result; Information processing system.

5. 2. The information processing system according to claim 1, The control unit determining whether or not to conduct a privacy impact assessment based on the information input via the screen and a predetermined determination logic; Information processing system.

6. 6. The information processing system according to claim 5, The control unit Accepting an operation to change the determination logic; changing the determination logic in response to the change operation; Information processing system.

7. An information processing method executed by an information processing system, Controls the display of the screen on demand, the screen is configured to allow input of information about a solution; the solution is a candidate for a privacy impact assessment; Determine whether or not to conduct a privacy impact assessment of the solution based on the information entered via the screen; Output the result of the judgment. Information processing methods.

8. A program, Computer, A program for causing the information processing system according to any one of claims 1 to 6 to function.

Images