Purpose-Action Mapping for Compliant Personal Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems struggle to efficiently implement purpose-based data processing and ensure compliance with data privacy regulations, leading to inconsistent and resource-intensive manual approaches.
Innovation Solution
A software system that models purposes for data processing, linking custom-defined purposes with processing actions, and associates data categories with purposes to enable purpose-based processing, thereby simplifying compliance and ensuring higher data protection levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual approaches are used to implement purpose-based data processing, then data privacy compliance can be achieved, but resource consumption increases and efficiency decreases
Solution Approach 1:
The system automatically determines whether input data can be used for processing by comparing data categories with purpose mappings, eliminating the need for manual intervention. The software system self-regulates data processing decisions based on pre-configured purpose mappings, improving efficiency while maintaining compliance.
Solution Approach 2:
The patent introduces an intermediary layer (the purpose mapping mechanism) that sits between raw data and processing actions. This intermediary automatically determines data usability by matching data categories with purposes, replacing manual approaches and improving both efficiency and consistency.
2Reliability
If manual methods are used for purpose-based processing decisions, then data protection levels can be maintained, but resource usage increases
Solution Approach 1:
The system performs preliminary configuration of purpose mappings before actual data processing occurs. By pre-establishing the relationships between data categories and purposes, the system eliminates the need for repeated manual assessments during processing, reducing resource usage while maintaining protection levels.
Solution Approach 2:
The software system automatically determines data usability by querying pre-configured purpose mappings, eliminating the need for continuous manual intervention. This self-service approach maintains data protection while significantly reducing resource consumption.
3Loss of information
If purpose-based processing is implemented without automated mapping, then data categories can be tracked, but processing consistency decreases
Solution Approach 1:
The system implements a feedback mechanism where the purpose mapping table stores and retrieves mapping relationships between data categories and purposes. This feedback loop ensures that every data processing decision consistently references the same predefined mappings, improving processing consistency while maintaining data category tracking.
Solution Approach 2:
The patent transforms the processing approach by changing from manual case-by-case decisions to automated parameter-based matching. By using data category parameters and purpose mapping parameters, the system achieves consistent processing while maintaining full tracking capability.
Data Source
AI summary
The present disclosure involves systems, software, and computer implemented methods for data privacy protocols. One example method includes receiving information defining a purpose for processing personal data of a data category stored in an object. A first mapping is received of a processing action to the purpose. Input data to be obtained for the processing action is identified. A determination is made as to whether the input data is of the data category that has been mapped to the purpose. The processing action is executed using the input data as purpose-based processing of the input data, in response to determining that the input data can be used during execution of the processing action for the purpose. Processing of the input data by the processing action is prevented, in response to determining that the input data cannot be used during execution of the processing action for the purpose.