Automated Data Subject Access Request System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a growing need for improved systems and methods to manage personal data in compliance with privacy and security policies, particularly to minimize the number of entities processing personal data and to facilitate individuals' requests for data access and deletion, as breaches and misuse of personal information have become more frequent.
Innovation Solution
A computer-implemented method and system that analyzes electronic correspondence to determine if an individual actively does business with an entity and automatically submits a data subject access request on behalf of the individual to modify or delete their personal data, utilizing data model generation and population techniques to map relationships between data assets and facilitate compliance with regulations like GDPR.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual data subject access requests are processed individually, then each request receives personalized attention, but the time and resources required increase significantly
Solution Approach 1:
The system enables automated self-service processing of data subject access requests by analyzing email correspondence to automatically identify data subjects, determine their business relationships with entities, and generate appropriate access requests without manual intervention, thereby reducing processing time while maintaining operational ease
Solution Approach 2:
The patent replaces manual mechanical processing of access requests with automated computational analysis of email data, using algorithms to extract relevant information and generate requests automatically, substituting human effort with machine-based processing to reduce time loss
2Reliability
If personal data is retained across multiple entities, then comprehensive service history is maintained, but privacy risks and security vulnerabilities increase
Solution Approach 1:
The system applies different data retention strategies to different entities based on the individual's active business relationship status, automatically identifying which entities should retain data and which should have data accessed or deleted, thereby protecting privacy while preserving necessary service history locally where needed
3Measurement precision
If automated systems analyze all electronic correspondence to determine active business relationships, then accuracy in identifying relevant entities improves, but system complexity and computational resources increase
Solution Approach 1:
The patent employs automated computational systems to analyze electronic correspondence, replacing manual analysis with machine-based text processing and pattern recognition algorithms that can accurately determine active business relationships by examining email metadata and content without requiring complex human intervention
Data Source
AI summary
Computer systems and methods for: (1) analyzing electronic correspondence associated with a data subject (e.g., the emails within one or more email in-boxes associated with the data subject); (2) based on the analysis, identifying at least one entity that that the data subject does not actively do business with (e.g., as evidenced by the fact that the data subject no longer opens emails from the entity, and/or has set up a rule to automatically delete emails received from the entity); and (3) in response to identifying the entity as an entity that the data subject no longer does business with, at least substantially automatically populating and/or submitting a data subject access request to the entity (e.g., to delete all personal information being processed by the entity).