Automated Data Deletion System for Privacy Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack efficient methods for managing and deleting personal data across multiple systems, making it difficult for organizations to comply with privacy and security policies, especially in handling frequent requests from data subjects.
Innovation Solution
A computer-implemented data processing method and system that identifies and facilitates the deletion of personal data by processing requests, automatically determining storage locations, and taking actions based on identified causes, using data models and intelligent identity scanning techniques to manage and analyze data subject access requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If manual methods are used to manage and delete personal data across multiple systems, then compliance with privacy policies can be achieved, but the process is time-consuming and inefficient
Solution Approach 1:
The system performs preliminary actions by automatically identifying storage locations of personal data before deletion requests are processed. Data models are pre-established to map personal data across systems, enabling rapid response to deletion requests without manual searching or analysis.
Solution Approach 2:
The system enables self-service by automatically processing data subject requests without requiring manual intervention. The automated system identifies, locates, and deletes personal data across multiple systems based on deletion requests, eliminating the need for manual data management operations.
2Productivity
If automated systems are implemented to process data subject requests, then processing efficiency improves, but system complexity increases
Solution Approach 1:
Data models serve as intermediaries between data subject requests and the actual data storage systems. These models abstract the complexity of data locations and relationships, providing a simplified interface for automated processing while managing the underlying system complexity.
Solution Approach 2:
The automated system performs multiple functions including identifying personal data, determining storage locations across different systems, and executing deletions. This multi-functional approach consolidates what would otherwise require separate manual processes into a single automated workflow.
3Reliability
If comprehensive scanning of all systems is performed to locate personal data, then complete compliance is achieved, but processing time increases
Solution Approach 1:
The system performs preliminary actions by pre-establishing data models that map personal data locations across systems before actual deletion requests are processed. This preliminary mapping enables immediate identification of data without comprehensive scanning at the time of request.
Solution Approach 2:
The patent replaces mechanical comprehensive scanning with intelligent query-based retrieval using pre-established data models. Instead of systematically searching all systems, the system uses the data models to directly query and identify specific personal data locations, dramatically reducing processing time while maintaining completeness.
Data Source
AI summary
In particular embodiments, in response a data subject submitting a request to delete their personal data from an organization's systems, the system may: (1) automatically determine where the data subject's personal data is stored; (2) in response to determining the location of the data (which may be on multiple computing systems), automatically facilitate the deletion of the data subject's personal data from the various systems; and (3) determine a cause of the request to identify one or more processing activities or other sources that result in a high number of such requests.