Integrated End-of-Purpose Protocol for Data Privacy Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In complex application landscapes, ensuring data privacy and compliance with regulations by efficiently blocking and deleting personal data across multiple integrated systems is challenging due to distributed end-of-purpose checks and replication issues, leading to inefficiencies and potential non-compliance.
Innovation Solution
Implementing an aligned purpose disassociation protocol that allows each system to locally determine if a purpose can be disassociated without actually doing so, with a central component evaluating these decisions to send disassociation instructions, and an integrated end-of-purpose protocol for consensus-based blocking and unblocking of master data objects across systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If distributed end-of-purpose checks are performed across multiple systems, then data privacy compliance is improved, but system complexity and synchronization delays increase
Solution Approach 1:
The patent introduces a central coordinator system that acts as an intermediary between multiple distributed applications. This coordinator receives end-of-purpose notifications from various systems, performs centralized evaluation of blocking decisions, and distributes unblocking commands back to applications. This mediator approach maintains data privacy compliance across distributed systems while reducing the complexity of direct peer-to-peer synchronization between all applications.
2Stability of the object's composition
If synchronous calls are used for end-of-purpose checks across systems, then consistency is improved, but processing speed and efficiency deteriorate
Solution Approach 1:
The patent implements preliminary blocking decisions at each application level before centralized coordination. Applications can locally determine and execute blocking actions based on their own end-of-purpose assessments, without waiting for synchronous confirmation from all other systems. The centralized coordinator then performs evaluation and sends unblocking commands only when appropriate, eliminating the need for slow synchronous wait cycles while maintaining consistency.
3Reliability
If master data is replicated across multiple systems, then data availability is improved, but blocking and deletion efficiency worsens
Solution Approach 1:
The patent establishes a feedback mechanism where applications report their blocking status and end-of-purpose conditions to a central coordinator. The coordinator evaluates this feedback information and determines the appropriate unblocking commands to send back to applications. This feedback loop enables efficient coordination of blocking and deletion operations across replicated master data without requiring complex real-time synchronization between all systems.
Data Source
AI summary
The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes sending a block command for an object to each application in a multiple-application landscape that includes a master data distribution application. A blocking status is received from each application that indicates whether the application successfully blocked the object in response to the block command. An overall blocking status is determined based on the received blocking statuses. In response to determining that at least one application failed to block the object, an unblock command is sent to each application. An unblocking status is received from each application and an overall unblocking status is determined. In response to determining that at least one application failed to unblock the object, a redistribution request is sent to the master data distribution application to redistribute the object to applications that failed to unblock the object.