Data Record Verification Apparatus for Personal Information Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack a mechanism to verify whether the processes performed on personal data by personal information handling business operators are accurately reflected in the corresponding records, as required by the Personal Information Protection Act.
Innovation Solution
An information processing apparatus that acquires records related to data processes and consent from a first storage system and logs of operations related to these processes from a second storage system, and verifies the consistency of the acquired records based on the acquired logs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If personal information handling business operators create and store records related to data processes (disclosure records, receipt records, acquirement records, generation records, deletion records), then the traceability and documentation of personal data processing is improved, but there is no mechanism to verify whether the actual processes match the recorded information
Solution Approach 1:
The patent implements a feedback mechanism where verification results (whether process execution matches record information) are fed back to the personal information handling business operator. The verification apparatus compares actual process execution information against stored record information and provides verification results, enabling continuous improvement and accountability of data processing practices while maintaining traceability.
Solution Approach 2:
The patent introduces a verification apparatus as an intermediary component between the personal information handling business operator and the audit/verification process. This intermediary apparatus automatically retrieves record information, compares it with actual process execution, and generates verification results, thereby bridging the gap between record-keeping and verification without requiring direct manual intervention.
2Loss of information
If detailed records of all personal data processes are created and stored for verification purposes, then the completeness of documentation is improved, but the complexity of the record management system increases
Solution Approach 1:
The patent segments the verification process into distinct functional modules: a record information acquisition unit that retrieves specific record data, a verification unit that compares records with actual processes, and a result generation unit that produces verification outcomes. This modular segmentation simplifies the overall system complexity while maintaining comprehensive documentation capabilities.
Solution Approach 2:
The patent extracts only the essential verification functionality from the complex record management system. Instead of managing all record operations within a single complex system, the verification apparatus extracts and focuses solely on the verification function, retrieving necessary record information, comparing it with process execution, and generating results, thereby reducing overall system complexity.
Data Source
AI summary
According to one embodiment, an information processing apparatus includes a processor configured to: acquire a record that is at least one of a record related to a process for data and a record related to consent to the process for the data, from a first storage system that stores the record; acquire a log of an operation performed in relation to at least one of the process and the consent, from a second storage system that stores the log; and verify consistency of the acquired record, based on the acquired log.