Patent ID: 9443101
Filing Date: 2016-09-13
CPC Classification: G06F

Claim Text:
1. A method for implementing a privacy policy, comprising: for an application to be run, receiving definitions for a set of classes of record and for each of the record classes, a definition of at least one field, wherein at least one of the fields is designated as a sensitive field by a default privacy policy; providing for a user to consent to relaxing the default privacy policy for at least one of the sensitive fields; receiving a user's consent to relaxing the default privacy policy for at least one of the sensitive fields, with respect to the user's data in the respective sensitive field; with a computing device including a processor, generating a consent privacy rule based on the received consent for the at least one of the sensitive fields; and providing a mapping aspect which is configured to be deployed when the application is run, the mapping aspect identifying joins at which code of the application is to be augmented to relax the default privacy policy for the user's data in a respective sensitive field for which a minimized value is generated under the default privacy policy, without recompiling the original application; and when the application is run, calling a minimization service to apply a level of transparency to the data in the at least one sensitive field, as authorized by the generated consent privacy rule, whereby the application does not have access to the user's data in the sensitive fields unless the user's consent for relaxing the default privacy policy for the field is identified.