PII Data Segmentation and Flag-Based Auditing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for managing Personally Identifiable Information (PII) data face challenges in efficiently searching, storing, and deleting PII data at scale, particularly in compliance with privacy laws and regulations such as GDPR and CCPA.
Innovation Solution
A system and method that utilize a PII key to efficiently store, search, and delete PII data. The system filters datasets based on a PII flag to quickly identify PII data, uses PII keys for secure storage and retrieval, and implements mechanisms for batch deletion and data recovery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If PII data is stored in large datasets without specialized indexing, then storage capacity is maintained, but search time for PII data becomes unacceptably long
Solution Approach 1:
The patent segments the large dataset into two distinct components: a PII dataset containing only personally identifiable information records, and a non-PII dataset containing all other records. This segmentation enables the system to quickly filter and search only the relevant PII portion when deletion or auditing requests are made, dramatically improving search speed without requiring complexity in the entire data structure
Solution Approach 2:
The patent introduces a PII flag as an intermediary marker that identifies which records contain PII data. This flag acts as an index or mediator that allows the system to quickly locate PII records without scanning the entire dataset, thereby improving search efficiency while maintaining a relatively simple overall data structure
2Loss of time
If manual search methods are used to locate PII data for deletion, then system complexity remains low, but the time required to comply with privacy laws increases significantly
Solution Approach 1:
The system performs preliminary action by pre-tagging and organizing data into PII and non-PII datasets before deletion requests are made. The PII flag is set during data ingestion, and PII records are pre-segregated into a dedicated PII dataset. When deletion requests arrive, the system can immediately query the pre-organized PII dataset without manual searching, significantly reducing compliance time while maintaining high productivity
Solution Approach 2:
The system implements self-service by automatically identifying, filtering, and preparing PII records for deletion through the PII flag mechanism. The pre-configured PII dataset and flag system enable automated compliance processes that do not require manual intervention, thereby reducing both time loss and maintaining high data processing efficiency
3Ease of operation
If all data is stored together without classification, then storage management is simple, but the ability to recover or delete specific PII data efficiently is compromised
Solution Approach 1:
The patent segments data into PII and non-PII datasets while maintaining simple management through automated flagging. The PII dataset is clearly defined and separately managed, making operations like deletion and recovery straightforward. This segmentation actually simplifies management of specific data types while dramatically improving the reliability of PII-specific operations compared to unclassified storage
Data Source
AI summary
The present application discloses a method, system, and computer system for deleting, auditing, and/or performing disaster recovery for personal identifiable information (PII). The method includes determining to delete from a dataset PII data corresponding to an individual, determining a PII key associated with the individual, and performing a lookup with respect to the dataset for PII data associated with the individual using the PII key.