Using a privacy agreement framework to improve handling of personally identifiable information
US7603317B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jun 19, 2001 |
| Grant date | Oct 13, 2009 |
| Priority date | — |
| Expiry date | Oct 4, 2025 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/6245
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
The invention entails identifying the parties involved in a process of handling personally identifiable information; identifying the data involved in said process; classifying the data; expressing each relationship between each pair of said parties in terms of a privacy agreement; and representing the parties, data, and privacy agreements graphically in one or more privacy agreement relationship diagrams. The invention has the advantage of identifying opportunities to reduce privacy-related risks, including identifying unnecessary exchanges of data, for possible elimination, and identifying opportunities to transform data into a less sensitive form. Privacy agreements are based on a limited set of privacy-related actions: access, disclose, release, notify, utilize, update, withdrawConsent, giveConsent, delete, anonymize, depersonalize, and repersonalize. One aspect of the present invention is a method for improving the handling of personally identifiable information. Another aspect of the present invention is a system for executing the method of the present invention. A third aspect of the present invention is as a set of instructions on a computer-usable medium, or resident in a c…
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.