DATA PRIVACY ARCHITECTURE, SYSTEMS, AND METHODS

Systems, apparatuses, and methods for managing privacy of data are provided. The method includes providing at least one processor in communication with the at least one database, a memory device including readable instructions, and at least one of an agent device and a user device in communication with the at least one processor via a network connection; receiving at least one communication request related to user data; collecting usage data of the user data; and transmitting the communication containing the usage data to a user.

FIELD

The invention relates generally to data privacy, and more particularly to architecture, systems, and methods for managing data privacy.

BACKGROUND

Data privacy, or information privacy, often refers to a specific kind of privacy linked to personal information that is provided from individuals to private enterprises in a variety of different applications. Currently, protections for personal information are sector-specific, including personal health information, educational information, children's information, and financial information, and each has different enforcement mechanisms and unique requirements on consent and disclosure. However, data privacy is ever-evolving in how personal information is used and how it is regulated. The future of data privacy will likely require greater protections and more affirmative rights for individuals.

Accordingly, it would be desirable to develop architecture, systems, and methods for managing data privacy that provide enhanced data privacy protection and control.

BRIEF SUMMARY

In concordance and agreement with the present invention, architecture, systems, and methods for managing data privacy that provide enhanced data privacy protection and control, have surprisingly been discovered.

In one embodiment, a system for managing data, the system comprises: a computing system including at least one processor and at least one memory, wherein the computing system executes computer-readable instructions; and a network connection operatively connecting the computing system to at least one of an agent device and a user device; wherein, upon execution of the computer-readable instructions, the at least one processor performs steps comprising: receiving at least one communication request related to user data; collecting usage data of the user data; and transmitting the at least one communication containing the usage data of the user data to a user.

In some embodiments, the at least one processor further performs the step of verifying credentials of an unauthenticated user of a data privacy application.

In some embodiments, the at least one processor further performs the step of verifying identification documentation of an unauthenticated user of a data privacy application.

In some embodiments, the at least one processor further performs the step of filtering the user data prior to transmitting the communication containing the usage data to the user.

In some embodiments, the at least one communication request is received via a data privacy application.

In some embodiments, the at least one communication request is received from an authenticated user of a data privacy application.

In some embodiments, the at least one communication request is received from an unauthenticated user of a data privacy application.

In some embodiments, the at least one communication request is received via a graphical user interface of a data privacy application.

In some embodiments, the at least one communication request is received from an agent of an enterprise system.

In some embodiments, the communication containing the usage data is hosted on a data privacy application.

In another embodiment, a method for managing data, comprises the steps of: providing at least one processor in communication with the at least one database, a memory device including readable instructions, and at least one of an agent device and a user device in communication with the at least one processor via a network connection; receiving at least one communication request related to user data; collecting usage data of the user data; and transmitting the communication containing the usage data to a user.

In some embodiments, the method further comprises the step of verifying credentials of an unauthenticated user of a data privacy application.

In some embodiments, the method further comprises the step of verifying identification documentation of an unauthenticated user of a data privacy application.

In some embodiments, the method further comprises the step of filtering the user data prior to transmitting the communication containing the usage data to the user.

In some embodiments, the at least one communication request is received via a data privacy application.

In some embodiments, the at least one communication request is received from an authenticated user of a data privacy application.

In some embodiments, the at least one communication request is received from an unauthenticated user of a data privacy application.

In some embodiments, the at least one communication request is received via a graphical user interface of a data privacy application.

In some embodiments, the at least one communication request is received from an agent of an enterprise system.

In some embodiments, the communication containing the usage data is hosted on a data privacy application.

DETAILED DESCRIPTION

Embodiments of the present invention will now be described more fully hereinafter with reference to the accompanying drawings, in which some, but not all, embodiments of the invention are shown. Indeed, the invention may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided so that this disclosure will satisfy applicable legal requirements. Like numbers refer to like elements throughout. Unless described or implied as exclusive alternatives, features throughout the drawings and descriptions should be taken as cumulative, such that features expressly associated with some particular embodiments can be combined with other embodiments. Unless defined otherwise, technical and scientific terms used herein have the same meaning as commonly understood to one of ordinary skill in the art to which the presently disclosed subject matter pertains.

The exemplary embodiments are provided so that this disclosure will be both thorough and complete, and will fully convey the scope of the invention and enable one of ordinary skill in the art to make, use, and practice the invention.

The terms “coupled,” “fixed,” “attached to,” “communicatively coupled to,” “operatively coupled to,” and the like refer to both (i) direct connecting, coupling, fixing, attaching, communicatively coupling; and (ii) indirect connecting coupling, fixing, attaching, communicatively coupling via one or more intermediate components or features, unless otherwise specified herein. “Communicatively coupled to” and “operatively coupled to” can refer to physically and/or electrically related components.

FIG.1illustrates a system100and environment thereof, according to at least one embodiment, by which a user110benefits through use of services and products of an enterprise system200. The environment may include, for example, a distributed cloud computing environment (private cloud, public cloud, community cloud, and/or hybrid cloud), an on-premise environment, fog computing environment, and/or an edge computing environment. The user110accesses services and products by use of one or more user devices, illustrated in separate examples as a computing device104and a mobile device106, which may be, as non-limiting examples, a smart phone, a portable digital assistant (PDA), a pager, a mobile television, a gaming device, a laptop computer, a camera, a video recorder, an audio/video player, radio, a GPS device, or any combination of the aforementioned, or other portable device with processing and communication capabilities. In the illustrated example, the mobile device106is illustrated inFIG.1as having exemplary elements, the below descriptions of which apply as well to the computing device104, which can be, as non-limiting examples, a desktop computer, a laptop computer, or other user-accessible computing device.

Furthermore, the user device, referring to either or both of the computing device104and the mobile device106, may be or include a workstation, a server, or any other suitable device, including a set of servers, a cloud-based application or system, or any other suitable system, adapted to execute, for example any suitable operating system, including Linux, UNIX, Windows, macOS, iOS, Android and any other known operating system used on personal computers, central computing systems, phones, and other devices.

The user110can be an individual, a group, or any entity in possession of or having access to the user device, referring to either or both of the mobile device104and computing device106, which may be personal or public items. Although the user110may be singly represented in some drawings, at least in some embodiments according to these descriptions the user110is one of many such that a market or community of users, consumers, customers, business entities, government entities, clubs, and groups of any size are all within the scope of these descriptions.

The user device, as illustrated with reference to the mobile device106, includes components such as, at least one of each of a processing device120, and a memory device122for processing use, such as random access memory (RAM), and read-only memory (ROM). The illustrated mobile device106further includes a storage device124including at least one of a non-transitory storage medium, such as a microdrive, for long-term, intermediate-term, and short-term storage of computer-readable instructions126for execution by the processing device120. For example, the instructions126can include instructions for an operating system and various applications or programs130, of which the application132is represented as a particular example. The storage device124can store various other data items134, which can include, as non-limiting examples, cached data, user files such as those for pictures, audio and/or video recordings, files downloaded or received from other devices, and other data items preferred by the user or required or related to any or all of the applications or programs130.

The memory device122is operatively coupled to the processing device120. As used herein, memory includes any computer readable medium to store data, code, or other information. The memory device122may include volatile memory, such as volatile Random Access Memory (RAM) including a cache area for the temporary storage of data. The memory device122may also include non-volatile memory, which can be embedded and/or may be removable. The non-volatile memory can additionally or alternatively include an electrically erasable programmable read-only memory (EEPROM), flash memory or the like.

According to various embodiments, the memory device122and storage device124may be combined into a single storage medium. The memory device122and storage device124can store any of a number of applications which comprise computer-executable instructions and code executed by the processing device120to implement the functions of the mobile device106described herein. For example, the memory device122may include such applications as a conventional web browser application and/or a mobile P2P payment system client application. These applications also typically provide a graphical user interface (GUI) on the display140that allows the user110to communicate with the mobile device106, and, for example a mobile banking system, and/or other devices or systems. In one embodiment, when the user110decides to enroll in a mobile banking program, the user110downloads or otherwise obtains the mobile banking system client application from a mobile banking system, for example enterprise system200, or from a distinct application server. In other embodiments, the user110interacts with a mobile banking system via a web browser application in addition to, or instead of, the mobile P2P payment system client application.

The processing device120, and other processors described herein, generally include circuitry for implementing communication and/or logic functions of the mobile device106. For example, the processing device120may include a digital signal processor, a microprocessor, and various analog to digital converters, digital to analog converters, and/or other support circuits. Control and signal processing functions of the mobile device106are allocated between these devices according to their respective capabilities. The processing device120thus may also include the functionality to encode and interleave messages and data prior to modulation and transmission. The processing device120can additionally include an internal data modem. Further, the processing device120may include functionality to operate one or more software programs, which may be stored in the memory device122, or in the storage device124. For example, the processing device120may be capable of operating a connectivity program, such as a web browser application. The web browser application may then allow the mobile device106to transmit and receive web content, such as, for example, location-based content and/or other web page content, according to a Wireless Application Protocol (WAP), Hypertext Transfer Protocol (HTTP), and/or the like.

The memory device122and storage device124can each also store any of a number of pieces of information, and data, used by the user device and the applications and devices that facilitate functions of the user device, or are in communication with the user device, to implement the functions described herein and others not expressly described. For example, the storage device may include such data as user authentication information, etc.

The processing device120, in various examples, can operatively perform calculations, can process instructions for execution, and can manipulate information. The processing device120can execute machine-executable instructions stored in the storage device124and/or memory device122to thereby perform methods and functions as described or implied herein, for example by one or more corresponding flow charts expressly provided or implied as would be understood by one of ordinary skill in the art to which the subject matters of these descriptions pertain. The processing device120can be or can include, as non-limiting examples, a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU), a microcontroller, an application-specific integrated circuit (ASIC), a programmable logic device (PLD), a digital signal processor (DSP), a field programmable gate array (FPGA), a state machine, a controller, gated or transistor logic, discrete physical hardware components, and combinations thereof. In some embodiments, particular portions or steps of methods and functions described herein are performed in whole or in part by way of the processing device120, while in other embodiments methods and functions described herein include cloud-based computing in whole or in part such that the processing device120facilitates local operations including, as non-limiting examples, communication, data transfer, and user inputs and outputs such as receiving commands from and providing displays to the user.

The mobile device106, as illustrated, includes an input and output system136, referring to, including, or operatively coupled with, one or more user input devices and/or one or more user output devices, which are operatively coupled to the processing device120. The input and output system136may include input/output circuitry that may operatively convert analog signals and other signals into digital data, or may convert digital data to another type of signal. For example, the input/output circuitry may receive and convert physical contact inputs, physical movements, or auditory signals (e.g., which may be used to authenticate a user) to digital data. Once converted, the digital data may be provided to the processing device120. The input and output system136may also include a display140(e.g., a liquid crystal display (LCD), light emitting diode (LED) display, or the like), which can be, as a non-limiting example, a presence-sensitive input screen (e.g., touch screen or the like) of the mobile device106, which serves both as an output device, by providing graphical and text indicia and presentations for viewing by one or more user110, and as an input device, by providing virtual buttons, selectable options, a virtual keyboard, and other indicia that, when touched, control the mobile device106by user action. The user output devices include a speaker144or other audio device. The user input devices, which allow the mobile device106to receive data and actions such as button manipulations and touches from a user such as the user110, may include any of a number of devices allowing the mobile device106to receive data from a user, such as a keypad, keyboard, touch-screen, touchpad, microphone142, mouse, joystick, other pointer device, button, soft key, infrared sensor, and/or other input device(s). The input and output system136may also include a camera146, such as a digital camera.

Further non-limiting examples of input devices and/or output devices include, one or more of each, any, and all of a wireless or wired keyboard, a mouse, a touchpad, a button, a switch, a light, an LED, a buzzer, a bell, a printer and/or other user input devices and output devices for use by or communication with the user110in accessing, using, and controlling, in whole or in part, the user device, referring to either or both of the computing device104and a mobile device106. Inputs by one or more user110can thus be made via voice, text or graphical indicia selections. For example, such inputs in some examples correspond to user-side actions and communications seeking services and products of the enterprise system200, and at least some outputs in such examples correspond to data representing enterprise-side actions and communications in two-way communications between a user110and an enterprise system200.

The input and output system136may also be configured to obtain and process various forms of authentication via an authentication system to obtain authentication information of a user110. Various authentication systems may include, according to various embodiments, a recognition system that detects biometric features or attributes of a user such as, for example fingerprint recognition systems and the like (hand print recognition systems, palm print recognition systems, etc.), iris recognition and the like used to authenticate a user based on features of the user's eyes, facial recognition systems based on facial features of the user, DNA-based authentication, or any other suitable biometric attribute or information associated with a user. Additionally or alternatively, voice biometric systems may be used to authenticate a user using speech recognition associated with a word, phrase, tone, or other voice-related features of the user. Alternate authentication systems may include one or more systems to identify a user based on a visual or temporal pattern of inputs provided by the user. For instance, the user device may display, for example, selectable options, shapes, inputs, buttons, numeric representations, etc. that must be selected in a pre-determined specified order or according to a specific pattern. Other authentication processes are also contemplated herein including, for example, email authentication, password protected authentication, device verification of saved devices, code-generated authentication, text message authentication, phone call authentication, etc. The user device may enable users to input any number or combination of authentication systems.

The user device, referring to either or both of the computing device104and the mobile device106may also include a positioning device108, which can be for example a global positioning system device (GPS) configured to be used by a positioning system to determine a location of the computing device104or mobile device106. For example, the positioning system device108may include a GPS transceiver. In some embodiments, the positioning system device108includes an antenna, transmitter, and receiver. For example, in one embodiment, triangulation of cellular signals may be used to identify the approximate location of the mobile device106. In other embodiments, the positioning device108includes a proximity sensor or transmitter, such as an RFID tag, that can sense or be sensed by devices known to be located proximate a merchant or other location to determine that the consumer mobile device106is located proximate these known devices.

In the illustrated example, a system intraconnect138, connects, for example electrically, the various described, illustrated, and implied components of the mobile device106. The intraconnect138, in various non-limiting examples, can include or represent, a system bus, a high-speed interface connecting the processing device120to the memory device122, individual electrical connections among the components, and electrical conductive traces on a motherboard common to some or all of the above-described components of the user device (referring to either or both of the computing device104and the mobile device106). As discussed herein, the system intraconnect138may operatively couple various components with one another, or in other words, electrically connects those components, either directly or indirectly—by way of intermediate component(s)—with one another.

The user device, referring to either or both of the computing device104and the mobile device106, with particular reference to the mobile device106for illustration purposes, includes a communication interface150, by which the mobile device106communicates and conducts transactions with other devices and systems. The communication interface150may include digital signal processing circuitry and may provide two-way communications and data exchanges, for example wirelessly via wireless communication device152, and for an additional or alternative example, via wired or docked communication by mechanical electrically conductive connector154. Communications may be conducted via various modes or protocols, of which GSM voice calls, SMS, EMS, MMS messaging, TDMA, CDMA, PDC, WCDMA, CDMA2000, and GPRS, are all non-limiting and non-exclusive examples. Thus, communications can be conducted, for example, via the wireless communication device152, which can be or include a radio-frequency transceiver, a Bluetooth device, Wi-Fi device, a Near-field communication device, and other transceivers. In addition, GPS (Global Positioning System) may be included for navigation and location-related data exchanges, ingoing and/or outgoing. Communications may also or alternatively be conducted via the connector154for wired connections such by USB, Ethernet, and other physically connected modes of data transfer.

The processing device120is configured to use the communication interface150as, for example, a network interface to communicate with one or more other devices on a network. In this regard, the communication interface150utilizes the wireless communication device152as an antenna operatively coupled to a transmitter and a receiver (together a “transceiver”) included with the communication interface150. The processing device120is configured to provide signals to and receive signals from the transmitter and receiver, respectively. The signals may include signaling information in accordance with the air interface standard of the applicable cellular system of a wireless telephone network. In this regard, the mobile device106may be configured to operate with one or more air interface standards, communication protocols, modulation types, and access types. By way of illustration, the mobile device106may be configured to operate in accordance with any of a number of first, second, third, fourth, fifth-generation communication protocols and/or the like. For example, the mobile device106may be configured to operate in accordance with second-generation (2G) wireless communication protocols IS-136 (time division multiple access (TDMA)), GSM (global system for mobile communication), and/or IS-95 (code division multiple access (CDMA)), or with third-generation (3G) wireless communication protocols, such as Universal Mobile Telecommunications System (UMTS), CDMA2000, wideband CDMA (WCDMA) and/or time division-synchronous CDMA (TD-SCDMA), with fourth-generation (4G) wireless communication protocols such as Long-Term Evolution (LTE), fifth-generation (5G) wireless communication protocols, Bluetooth Low Energy (BLE) communication protocols such as Bluetooth 5.0, ultra-wideband (UWB) communication protocols, and/or the like. The mobile device106may also be configured to operate in accordance with non-cellular communication mechanisms, such as via a wireless local area network (WLAN) or other communication/data networks.

The communication interface150may also include a payment network interface. The payment network interface may include software, such as encryption software, and hardware, such as a modem, for communicating information to and/or from one or more devices on a network. For example, the mobile device106may be configured so that it can be used as a credit or debit card by, for example, wirelessly communicating account numbers or other authentication information to a terminal of the network. Such communication could be performed via transmission over a wireless communication protocol such as the Near-field communication protocol.

The mobile device106further includes a power source128, such as a battery, for powering various circuits and other devices that are used to operate the mobile device106. Embodiments of the mobile device106may also include a clock or other timer configured to determine and, in some cases, communicate actual or relative time to the processing device120or one or more other devices. For further example, the clock may facilitate timestamping transmissions, receptions, and other data for security, authentication, logging, polling, data expiry, and forensic purposes.

System100as illustrated diagrammatically represents at least one example of a possible implementation, where alternatives, additions, and modifications are possible for performing some or all of the described methods, operations and functions. Although shown separately, in some embodiments, two or more systems, servers, or illustrated components may utilized. In some implementations, the functions of one or more systems, servers, or illustrated components may be provided by a single system or server. In some embodiments, the functions of one illustrated system or server may be provided by multiple systems, servers, or computing devices, including those physically located at a central facility, those logically local, and those located as remote with respect to each other.

The enterprise system200can offer any number or type of services and products to one or more users110. In some examples, an enterprise system200offers products. In some examples, an enterprise system200offers services. Use of “service(s)” or “product(s)” thus relates to either or both in these descriptions. With regard, for example, to online information and financial services, “service” and “product” are sometimes termed interchangeably. In non-limiting examples, services and products include retail services and products, information services and products, custom services and products, predefined or pre-offered services and products, consulting services and products, advising services and products, forecasting services and products, internet products and services, social media, and financial services and products, which may include, in non-limiting examples, services and products relating to banking, checking, savings, investments, credit cards, automatic-teller machines, debit cards, loans, mortgages, personal accounts, business accounts, account management, credit reporting, credit requests, and credit scores.

To provide access to, or information regarding, some or all the services and products of the enterprise system200, automated assistance may be provided by the enterprise system200. For example, automated access to user accounts and replies to inquiries may be provided by enterprise-side automated voice, text, and graphical display communications and interactions. In at least some examples, any number of human agents210, can be employed, utilized, authorized or referred by the enterprise system200. Such human agents210can be, as non-limiting examples, point of sale or point of service (POS) representatives, online customer service assistants available to users110, advisors, managers, sales team members, and referral agents ready to route user requests and communications to preferred or particular other agents, human or virtual.

Human agents210may utilize agent devices212to serve users in their interactions to communicate and take action. The agent devices212can be, as non-limiting examples, computing devices, kiosks, terminals, smart devices such as phones, and devices and tools at customer service counters and windows at POS locations. In at least one example, the diagrammatic representation of the components of the user device106inFIG.1applies as well to one or both of the computing device104and the agent devices212.

Agent devices212individually or collectively include input devices and output devices, including, as non-limiting examples, a touch screen, which serves both as an output device by providing graphical and text indicia and presentations for viewing by one or more agent210, and as an input device by providing virtual buttons, selectable options, a virtual keyboard, and other indicia that, when touched or activated, control or prompt the agent device212by action of the attendant agent210. Further non-limiting examples include, one or more of each, any, and all of a keyboard, a mouse, a touchpad, a joystick, a button, a switch, a light, an LED, a microphone serving as input device for example for voice input by a human agent210, a speaker serving as an output device, a camera serving as an input device, a buzzer, a bell, a printer and/or other user input devices and output devices for use by or communication with a human agent210in accessing, using, and controlling, in whole or in part, the agent device212.

Inputs by one or more human agents210can thus be made via voice, text or graphical indicia selections. For example, some inputs received by an agent device212in some examples correspond to, control, or prompt enterprise-side actions and communications offering services and products of the enterprise system200, information thereof, or access thereto. At least some outputs by an agent device212in some examples correspond to, or are prompted by, user-side actions and communications in two-way communications between a user110and an enterprise-side human agent210.

From a user perspective experience, an interaction in some examples within the scope of these descriptions begins with direct or first access to one or more human agents210in person, by phone, or online for example via a chat session or website function or feature. In other examples, a user is first assisted by a virtual agent214of the enterprise system200, which may satisfy user requests or prompts by voice, text, or online functions, and may refer users to one or more human agents210once preliminary determinations or conditions are made or met.

A computing system206of the enterprise system200may include components such as, at least one of each of a processing device220, and a memory device222for processing use, such as random access memory (RAM), and read-only memory (ROM). The illustrated computing system206further includes a storage device224including at least one non-transitory storage medium, such as a microdrive, for long-term, intermediate-term, and short-term storage of computer-readable instructions226for execution by the processing device220. For example, the instructions226can include instructions for an operating system and various applications or programs230, of which the application232is represented as a particular example. The storage device224can store various other data234, which can include, as non-limiting examples, cached data, and files such as those for user accounts, user profiles, account balances, and transaction histories, files downloaded or received from other devices, and other data items preferred by the user or required or related to any or all of the applications or programs230.

The computing system206, in the illustrated example, includes an input/output system236, referring to, including, or operatively coupled with input devices and output devices such as, in a non-limiting example, agent devices212, which have both input and output capabilities.

In the illustrated example, a system intraconnect238electrically connects the various above-described components of the computing system206. In some cases, the intraconnect238operatively couples components to one another, which indicates that the components may be directly or indirectly connected, such as by way of one or more intermediate components. The intraconnect238, in various non-limiting examples, can include or represent, a system bus, a high-speed interface connecting the processing device220to the memory device222, individual electrical connections among the components, and electrical conductive traces on a motherboard common to some or all of the above-described components of the user device.

The computing system206, in the illustrated example, includes a communication interface250, by which the computing system206communicates and conducts transactions with other devices and systems. The communication interface250may include digital signal processing circuitry and may provide two-way communications and data exchanges, for example wirelessly via wireless device252, and for an additional or alternative example, via wired or docked communication by mechanical electrically conductive connector254. Communications may be conducted via various modes or protocols, of which GSM voice calls, SMS, EMS, MMS messaging, TDMA, CDMA, PDC, WCDMA, CDMA2000, and GPRS, are all non-limiting and non-exclusive examples. Thus, communications can be conducted, for example, via the wireless device252, which can be or include a radio-frequency transceiver, a Bluetooth device, Wi-Fi device, Near-field communication device, and other transceivers. In addition, GPS (Global Positioning System) may be included for navigation and location-related data exchanges, ingoing and/or outgoing. Communications may also or alternatively be conducted via the connector254for wired connections such as by USB, Ethernet, and other physically connected modes of data transfer.

The processing device220, in various examples, can operatively perform calculations, can process instructions for execution, and can manipulate information. The processing device220can execute machine-executable instructions stored in the storage device224and/or memory device222to thereby perform methods and functions as described or implied herein, for example by one or more corresponding flow charts expressly provided or implied as would be understood by one of ordinary skill in the art to which the subjects matters of these descriptions pertain. The processing device220can be or can include, as non-limiting examples, a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU), a microcontroller, an application-specific integrated circuit (ASIC), a programmable logic device (PLD), a digital signal processor (DSP), a field programmable gate array (FPGA), a state machine, a controller, gated or transistor logic, discrete physical hardware components, and combinations thereof.

Furthermore, the computing device206, may be or include a workstation, a server, or any other suitable device, including a set of servers, a cloud-based application or system, or any other suitable system, adapted to execute, for example any suitable operating system, including Linux, UNIX, Windows, macOS, iOS, Android, and any known other operating system used on personal computer, central computing systems, phones, and other devices.

The user devices, referring to either or both of the computing device104and mobile device106, the agent devices212, and the enterprise computing system206, which may be one or any number centrally located or distributed, are in communication through one or more networks, referenced as network258inFIG.1.

Network258provides wireless or wired communications among the components of the system100and the environment thereof, including other devices local or remote to those illustrated, such as additional mobile devices, servers, and other devices communicatively coupled to network258, including those not illustrated inFIG.1. The network258is singly depicted for illustrative convenience, but may include more than one network without departing from the scope of these descriptions. In some embodiments, the network258may be or provide one or more cloud-based services or operations. The network258may be or include an enterprise or secured network, or may be implemented, at least in part, through one or more connections to the Internet. A portion of the network258may be a virtual private network (VPN) or an Intranet. The network258can include wired and wireless links, including, as non-limiting examples, 802.11a/b/g/n/ac, 802.20, WiMax, LTE, and/or any other wireless link. The network258may include any internal or external network, networks, sub-network, and combinations of such operable to implement communications between various computing components within and beyond the illustrated environment100. The network258may communicate, for example, Internet Protocol (IP) packets, Frame Relay frames, Asynchronous Transfer Mode (ATM) cells, voice, video, data, and other suitable information between network addresses. The network258may also include one or more local area networks (LANs), radio access networks (RANs), metropolitan area networks (MANs), wide area networks (WANs), all or a portion of the internet and/or any other communication system or systems at one or more locations.

The network258may incorporate a cloud platform/data center that support various service models including Platform as a Service (PaaS), Infrastructure-as-a-Service (IaaS), and Software-as-a-Service (SaaS). Such service models may provide, for example, a digital platform accessible to the user device (referring to either or both of the computing device104and the mobile device106). Specifically, SaaS may provide a user with the capability to use applications running on a cloud infrastructure, where the applications are accessible via a thin client interface such as a web browser and the user is not permitted to manage or control the underlying cloud infrastructure (i.e., network, servers, operating systems, storage, or specific application capabilities that are not user-specific). PaaS also do not permit the user to manage or control the underlying cloud infrastructure, but this service may enable a user to deploy user-created or acquired applications onto the cloud infrastructure using programming languages and tools provided by the provider of the application. In contrast, IaaS provides a user the permission to provision processing, storage, networks, and other computing resources as well as run arbitrary software (e.g., operating systems and applications) thereby giving the user control over operating systems, storage, deployed applications, and potentially select networking components (e.g., host firewalls).

The network258may also incorporate various cloud-based deployment models including private cloud (i.e., an organization-based cloud managed by either the organization or third parties and hosted on-premises or off premises), public cloud (i.e., cloud-based infrastructure available to the general public that is owned by an organization that sells cloud services), community cloud (i.e., cloud-based infrastructure shared by several organizations and manages by the organizations or third parties and hosted on-premises or off premises), and/or hybrid cloud (i.e., composed of two or more clouds e.g., private community, and/or public).

Two external systems202and204are expressly illustrated inFIG.1, representing any number and variety of data sources, users, consumers, customers, business entities, banking systems, government entities, clubs, and groups of any size are all within the scope of the descriptions. In at least one example, the external systems202and204represent automatic teller machines (ATMs) utilized by the enterprise system200in serving users110. In another example, the external systems202and204represent payment clearinghouse or payment rail systems for processing payment transactions, and in another example, the external systems202and204represent third party systems such as merchant systems configured to interact with the user device106during transactions and also configured to interact with the enterprise system200in back-end transactions clearing processes.

In certain embodiments, one or more of the systems such as the user device (referring to either or both of the computing device104and the mobile device106), the enterprise system200, and/or the external systems202and204are, include, or utilize virtual resources. In some cases, such virtual resources are considered cloud resources or virtual machines. The cloud computing configuration may provide an infrastructure that includes a network of interconnected nodes and provides stateless, low coupling, modularity, and semantic interoperability. Such interconnected nodes may incorporate a computer system that includes one or more processors, a memory, and a bus that couples various system components (e.g., the memory) to the processor. Such virtual resources may be available for shared use among multiple distinct resource consumers and in certain implementations, virtual resources do not necessarily correspond to one or more specific pieces of hardware, but rather to a collection of pieces of hardware operatively coupled within a cloud computing configuration so that the resources may be shared as needed.

One of the programs230of the enterprise system200may be a data privacy application232, a preferred architecture of which is shown inFIGS.2A and2B. The data privacy application232may be used by an enterprise to provide the users110with increased transparency, control, and insights into use and protection of their personal information.

In an embodiment, the enterprise system200allows the users110to request usage communications of personally identifiable information (PII) data via the data privacy application232. Such communications request is referred to hereinafter as a Personal Data Request (PDR). The PII data may include sensitive data and domain specific data. Herein, the PII data may refer to the data that may be utilized for determining identity of the user. Examples of fields including the PII data in case of the data privacy application232may include permanent account numbers, date of birth, e-mail address, residential address, and mobile numbers, for example. The PII data may also include data that can pose a risk or affect the user110financially or otherwise, if disclosed in public. In an embodiment, the PII data may include domain specific fields, and can be generated by the enterprise. Examples of the PII data for a financial institution such as a bank may include financial information such as debit and/or credit card numbers, CVV number, account balance, card expiry date, and other such fields, for example. As depicted, the data privacy application232may receive one or more PDRs from a requestor. The requestor may be one of the users110or the agents210of the enterprise system200. The PII data may be provided by various data sources to the data privacy application232. Suppression rules and criteria are applied to the collected PII data and the PII data is suppressed, scrubbed, and/filtered. The filtered PII data may then be outputted to the user110and/or stored by the data privacy application232for fulfillment.

Operations of the method, and combinations of operation in the method, may be implemented by various means, such as hardware, firmware, processor, circuitry and/or other device associated with execution of software including one or more computer program instructions. For example, one or more of the procedures described in various embodiments may be embodied by computer program instructions. In an example embodiment, the computer program instructions, which embody the procedures, described in various embodiments may be stored by at least one memory device of a system and executed by at least one processor in the system. Any such computer program instructions may be loaded onto a computer or other programmable system (for example, hardware) to produce a machine, such that the resulting computer or other programmable system embody means for implementing the operations specified in the method.

FIGS.3A and3Bdepict an exemplary method1000employed for the PDRs. The method1000depicted may be executed by an application of a system, for example, the data privacy application232of the enterprise system200ofFIG.1. In an example embodiment, the data privacy application232may be accessed via a graphical user interface (GUI) of a computing device, for example, the computing device104and/or the mobile device106of the user110ofFIG.1.

In some embodiments, the privacy data application232allows the requestors, including the users110(e.g., authenticated and unauthenticated users) and/or the agents210of the enterprise system200, to request and receive communications related to usage of the PII data. The authenticated users110may be an individual and/or entity that has an online user ID. The unauthenticated users110(e.g. guests) may be those without an online user ID or entirely new users of the application232. The communications may include details as to how the PII data of the users110is being used by the enterprise and/or the enterprise system200.

In some embodiments, the method1000may include steps for initiating communication requests and/or controlling the PII data of the users110. As depicted inFIGS.3A and3B, the data privacy application232may utilize and/or be in communication with various data resources262, including but not limited to a privacy preferences and consent management module, a customer information file (CIF), a workday module for employee data, an Adobe experience platform, an insurance module (e.g., Cobra Point), contractor data (e.g., Fieldglass), a mortgage enterprise database, a client analysis report (CAR), at least one of the applications230upstream of the data privacy application232, at least one third-party system (e.g., LexisNexis), an enterprise data lake (EDL), EDL whole files, a data filter, a custom data module (CDM), at least one of the applications230downstream of the data privacy application232, and a marketing module. It should be appreciated that the data privacy application232may utilize more or less of the applications230and/or the systems202,204of the enterprise system200.

In step1002of the method1000, the user110executes the data privacy application232using the computing device104and/or the mobile device106. In step1004, the user110inputs credentials into the data privacy application232. Once the privacy data application232authenticates the credentials of the user110, in step1006, a personal dashboard is provided at step1008. The personal dashboard may include a personalized landing page of the user110.

From the personal dashboard, in step1010, the user110initiates a communications request for a communication (i.e., “SEE DATA REQUEST”) and/or any accessibility needs (e.g., large font, etc.). When the communications request is initiated, the user110, in step1012, receives a confirmation, for example, a confirmation page that the communications request has been submitted and/or a request identification number. In step1014, an acknowledgement communication may be transmitted to the user110. The acknowledgment communication may be automatically generated and sent to the user110and/or transmitted by various means such as by electronic mail, for example. Upon completion of the communications request related to usage of the PII data, the user110may then close the PDR module and return to manage other preferences and data, and/or logout of the data privacy application232. The data privacy application232may then proceed to step1050as described hereinafter.

If the user110is not an authenticated user110, the user110may login as an unauthenticated user or guest at step1016or, alternatively, by contact with at least one of the agents210(i.e., via telephonic means) at step1018. Similar to the login as the authenticated user, the data privacy application232may require an input of certain credentials. When the user110is logged in as the unauthenticated user or guest or contacts the at least one of the agents210, a generic dashboard is provided to the user110or the at least one agents210at step1020. The generic dashboard may include a generic landing page of the data privacy application232.

From the generic dashboard, the user110or the at least one agent210, in step1022, initiates a communications request for a communication (i.e., “SEE DATA REQUEST”) and/or any accessibility needs (e.g., large font, etc.). When the communications request is initiated, the user110or the at least one agent210, in step1024, receives a confirmation, for example, a confirmation page that the communications request has been submitted and/or a request identification number. In step1026, an acknowledgement communication may be transmitted to the user110. The acknowledgment communication may be automatically generated and sent to the user110and/or transmitted by various means such as by electronic mail or U.S. mail, for example. In certain embodiments, the user110may receive the acknowledgement communication via electronic mail when the generic dashboard is used directly by the user110and by U.S. mail when the generic dashboard is accessed by the at least one agent210. Upon completion of the communications request related to usage of the PII data, the user110and/or the at least one agent210may then close the PDR module and return to manage other preferences and data, and/or logout of the data privacy application232.

Thereafter, at step1028, the credentials of the user110are subjected to a validation process. In some embodiments, the validation process may be conducted by a third-party application such as LexisNexis, for example. The validation process may require validation of all of the credentials of the user110, or only a portion thereof. For example, if the credentials include five criteria items, the validation process may only require three of those five criteria items to be accurate. When the credentials do not pass the validation process at step1030, an internal communication is transmitted to a decline queue of the data privacy application232, at step1032. The internal communication may be held in the decline queue for a predetermined period of time (i.e., a number of days or weeks). After expiration of the predetermined period of time, at step1034, a communication containing notification of the decline of the communications request for the usage data of the PII data may be transmitted to the user110. It is understood that the communication containing the notification of the decline of the communications request for the usage data of the PII data may be automatically generated. Once the communication of the declination of the communications request is transmitted to the user110, the data privacy application232is ended at step1036.

When the credentials pass the validation process at step1030, at least one of the agents210of the enterprise system200may review the communications request for the usage data of the PII data and/or any identification documentation included therewith at step1038. At step1040, the data privacy application232then determines whether user identification documentation still is required to be submitted. If yes, the at least one of the agents210of the enterprise system200transmits a request for such identification documentation (i.e. an envelope and/or submission instructions) at step1042. Upon submission of the requested identification documentation, step1038is repeated. If additional identification documentation is not required, the submitted identification documentation is examined for legality at step1044. If the submitted identification documentation is determined to be legally insufficient, a communication containing notification of the decline of the communication request for the usage data of the PII data may be transmitted to the user110at step1046. It is understood that the communication containing the notification of the decline of the communications request for the usage data of the PII data may be automatically generated. Once the communication of the declination of the communications request is transmitted to the user110, the data privacy application232is ended at step1048. Conversely, if the submitted identification documentation is determined to be legally sufficient, at step1044, the data privacy application232proceeds to step1050.

Once the communications request for the usage data of the PII data is initiated by the user110and/or verified by the data privacy application232, the data privacy application232commences a collection of the PII data, at step1050. The PII data collection may be conducted by the data privacy application232via the APIs. In some instances, the data privacy application232, at step1052, may be in communication various the data resources262. At step1054, one or more of the data resources262may transmit the collected PII data to the data privacy application232. The collected PII data may be communicated via the APIs. The collected PII data may be filtered at step1056. An external facing taxonomy (EFT tool) may be employed to conduct the filtering of the collected PII data. In certain embodiments, the collected PII data may be compared to predetermined rules and/or criteria to delete unnecessary and/or undesired segments of the PII data. At step1058, the filtered PII data is transformed by the data privacy application232into a communication (e.g., an electronic file) containing usage data of the filtered PII data. The communication containing the usage data of the filtered PH data may then be reviewed for quality assurance, at step1060. When the communication containing the usage data of the filtered PH data does not meet quality assurance standards at step1062, a notification with concerns is transmitted to at least one of the agents210of the enterprise system200at step1064. Thereafter, the step1056may be repeated and the collected PH data may be further filtered to address the concerns provided in the notification transmitted at step1064. The steps1056thru1064are repeated until the communication containing the usage data of the filtered PII data meets the quality assurance standards, at step1062. When the communication containing the usage data of the filtered PII data meets the quality assurance standards at step1062, the communication containing the usage data of the filtered PII data may then be provided and/or hosted on the personal dashboard of the user110by the privacy data application232at step1065.

When the user110is determined to have a login to the data privacy application at step1066, either by being an authenticated user110or an agent210, a communication is directly transmitted thereto. In some embodiments, the communication is transmitted via electronic mail and contains a link to log into the data privacy application232and view the communication containing the usage data of the PII data of the user110on the personal dashboard at step1068. Upon transmittal of the electronic mail containing the link, the data privacy application232is ended at step1070. At step1072, the authenticated user110uses the link in the communication to log into the data privacy application232and view the communication containing the usage data of the PII data of the user110. Once the authenticated user110has viewed such communication, the data privacy application is ended at step1074. Alternatively, at step1076, the agent210of the enterprise system200and/or the unauthenticated user110uses the link in the communication to log into the data privacy application232and view the communication containing the usage data of the PII data of the user110. Similar to step1074, once such communication has been viewed, the data privacy application is ended at step1078.

Referring back to step1066, when the user110does not have a login to the data privacy application, a communication is transmitted to the user110via secured electronic mail and/or U.S. mail with tracking. Upon transmittal of the electronic mail and/or the U.S. mail with tracking, the data privacy application232is ended at step1082.

The data privacy application232may be a mechanism to provide the users110with transparency into the PII data collected by the enterprise system200and how it is used as well as an understanding of how privacy and security are handled. The data privacy application232will enable compliance with regulatory requirements, build trust and secure market share, enabling a broader, more dynamic use of the PII data. More importantly, the data privacy application232provides a positive user experience. Features of the data privacy application232are expandable as user expectations and privacy regulations evolve over time.

In an embodiment, the enterprise system200may be caused to transmit a communication containing the usage data of the filtered PII data based at least on one of a plurality of preconfigured rules and criteria. In an embodiment, the plurality of preconfigured rules and criteria may be defined based on a user input and/or regulations. Since the enterprise system200is extensible and flexible, the communications containing the usage data of the filtered PII data defined herein are not static, and can be updated by adding, deleting, and/or replacing rules and criteria.

The use of the data privacy application232improves the efficiency of the human agents210and operation of the computing system206in various different respects. First, the disclosed method eliminates unnecessary time, effort, and communications relating to certain tasks performed by the human agents210and/or the computing system206that have been found to not have a positive impact on securing the usage data for the PII data from the various data resources. This may be especially relevant where extensive costs can be avoided by verifying requestor credentials and filtering the PII data prior to transmittal of any communication. This results in the human agents210and the computing system206avoiding a waste of resources when performing certain tasks. Second, the use of the data privacy application232also allows for certain variables in the data234to be determined to be private and further allows for the computing system206to be simplified by means of the elimination of undesired interactions. Third, the data privacy application232provides greater insight to the users110with respect to usage of their PII data by the enterprise system200. Each of the described advantages reduces network traffic as experienced by the computing system206due to the ability to initiate a communications request via the data privacy application via the graphical user interface.

Particular embodiments and features have been described with reference to the drawings. It is to be understood that these descriptions are not limited to any single embodiment or any particular set of features. Similar embodiments and features may arise or modifications and additions may be made without departing from the scope of these descriptions and the spirit of the appended claims.