Personal Data Segmentation for Jurisdiction-Aware Privacy Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing privacy preservation techniques fail to provide comprehensive protection for personally identifiable information (PII) when shared with third parties, especially in the context of online services, and do not allow individuals to control access and usage of their data according to jurisdiction-specific regulations.
Innovation Solution
A system that organizes personal information into interrelated databases using private, protected, and restricted identifiers, leveraging public-key cryptography to ensure privacy and compliance with jurisdiction-specific rules, allowing individuals to control data access and usage by encrypting and tokenizing data based on geographical and typological scopes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If personal data is shared with third parties for business purposes, then data utility and business value are improved, but privacy protection and security are worsened
Solution Approach 1:
The patent segments personal data into multiple distinct data domains (e.g., health data, financial data, location data) and applies different privacy protection rules to each domain. This allows selective sharing of specific data types with third parties while maintaining protection for other sensitive data, thus enabling data utility without compromising overall privacy.
Solution Approach 2:
The patent implements location-aware privacy protection where the level of privacy protection varies based on the geographical location and applicable jurisdiction. Data stored or processed in different locations can have different protection levels according to local regulations, allowing business operations across borders while maintaining compliance and protecting privacy appropriately for each region.
2Object-affected harmful factors
If data is encrypted to protect privacy, then security is improved, but data accessibility and usability are worsened
Solution Approach 1:
The patent applies encryption and privacy protection measures to data before it is stored or shared with third parties. By pre-encrypting data and embedding privacy rules in advance, the system ensures security is built-in from the start rather than adding it later, which maintains both security and accessibility without requiring complex real-time processing.
3Object-affected harmful factors
If comprehensive privacy protection is implemented, then privacy preservation is improved, but system complexity and compliance burden are worsened
Solution Approach 1:
The patent implements a universal privacy protection framework that automatically applies appropriate privacy rules based on the data type, location, and applicable jurisdiction. This multi-functional system handles multiple privacy requirements (GDPR, HIPAA, CCPA, etc.) through a single integrated mechanism, reducing the need for separate systems for each regulation and simplifying overall system complexity.
4Object-affected harmful factors
If data is tokenized to prevent decoding, then security is improved, but data processing capability and analytical utility are worsened
Solution Approach 1:
The patent applies tokenization selectively to only the most sensitive portions of data that require maximum protection, rather than tokenizing entire datasets. This partial application maintains security for critical information while leaving other data in its original format, preserving full processing capability and analytical utility for non-sensitive data elements.
Data Source
AI summary
The present document discloses a system and a method for structuring and organising data, including personally identifiable information, into a set of databases. The system and method allow for an individual to whom the data relates to be able to share parts of the data with different third parties in a privacy-respecting manner, respecting any applicable legislation related to data privacy. Third parties thus only can access parts of the data which are relevant to them and they need to seek the consent of the individual in order to have access to any private information.