Aligned Purpose Disassociation Protocol for Data Privacy Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In complex organizational landscapes, managing data privacy across multiple integrated applications is challenging due to distributed end-of-purpose checks and purpose disassociations, which can lead to inefficiencies and non-compliance with data regulations, especially in cloud environments where data consistency and regulatory requirements are hard to maintain.
Innovation Solution
An aligned purpose disassociation protocol is introduced, where each system performs a local 'can disassociate purpose' decision without actually disassociating purposes initially, and a central component evaluates these decisions to send disassociation instructions, allowing for asynchronous and efficient handling of purpose disassociation across systems, even without a leading system defined.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If distributed end-of-purpose checks are performed across multiple applications, then data privacy compliance is improved, but processing time and system complexity increase
Solution Approach 1:
The patent implements preliminary action by having applications pre-evaluate their local 'can disassociate purpose' decisions before actual disassociation occurs. This allows the central component to receive decisions in advance and coordinate the disassociation process efficiently, reducing actual processing time while maintaining compliance across all applications.
Solution Approach 2:
The central component acts as an intermediary that receives, evaluates, and coordinates disassociation decisions from multiple applications. This mediator pattern enables asynchronous processing where applications can submit decisions independently, and the central component orchestrates the final disassociation, reducing overall processing time while ensuring compliance.
2Reliability
If distributed end-of-purpose checks are performed across multiple applications, then data privacy compliance is improved, but system complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the end-of-purpose check process into independent local decisions at each application and a central coordination component. Each application independently evaluates its local context and submits decisions to the central component, which orchestrates the overall disassociation. This segmentation reduces system complexity by making each component's responsibility clear and manageable.
Solution Approach 2:
The central component serves as an intermediary that simplifies the distributed system architecture by providing a standardized interface for receiving and coordinating disassociation decisions. This mediator pattern reduces system complexity by centralizing the coordination logic and providing clear communication protocols between applications, making the overall system easier to manage and maintain.
3Stability of the object's composition
If synchronous purpose disassociation is implemented, then data consistency is improved, but processing time and system availability worsen
Solution Approach 1:
The patent implements dynamics by transitioning from a static synchronous disassociation model to a dynamic asynchronous model. Applications can submit their 'can disassociate purpose' decisions asynchronously, and the central component coordinates the actual disassociation based on received decisions. This dynamic approach allows the system to maintain data consistency while improving availability and reducing processing time.
Solution Approach 2:
The patent uses feedback mechanisms where applications provide their local disassociation decisions to the central component, which then coordinates the actual disassociation based on this feedback. This feedback loop ensures data consistency by confirming that all necessary applications agree on the disassociation before it occurs, while the asynchronous nature of the feedback improves system availability and reduces processing time.
Data Source
AI summary
The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes receiving, from a requesting application in a landscape that includes a set of multiple applications, a data subject information request for a data subject. A set of target applications is determined from the set of multiple applications. The data subject information request is provided to each target application in the set of target applications. A data subject information response is received from each of the target applications. Each data subject information response includes application data for the data subject that was retrieved by a respective target application in response to the data subject information request. The received data subject information responses are aggregated to generate an aggregated data subject information response. The aggregated data subject information response is provided to the requesting application in response to the data subject information request.