Patent ID: 7401352

Claim:
A method for securely guaranteeing a privacy policy between two enterprises, comprising: creating a message at a first enterprise, wherein the message includes a request for data concerning a specifically identified third party for data stored by a second enterprise and a privacy policy of the first enterprise; signing and certifying the message that the first enterprise has a tamper-proof system with a privacy rules engine and that the privacy policy of the first enterprise will be enforced by the privacy rules engine of the first enterprise; sending the message to the second enterprise; and running a privacy rules engine at the second enterprise to compare the privacy policy of the first enterprise with a set of privacy rules for the third party, wherein in response to a match between the privacy policy of the first enterprise and the set of privacy rules for the third party: encrypting the data requested by the first enterprise; and sending the encrypted requested data from the second enterprise to the first enterprise.