Patent ID: 8607308

Claim:
A computer-implemented method of facilitating privacy enforcement, the computer-implemented method comprising: receiving, from an associate of an enterprise, input related to use of stored customer information; accessing at least one of a plurality of subsystems including data related to customers; accessing at least one of a plurality of subsystems including data related to associates; determining, based on the data related to associates, an attribute of the associate; comparing the data related to customers with the attribute of the associate, wherein the comparison determines the stored customer information that the associate is able to access; determining which of a plurality of subsystems to access based on comparing of data related to customers and the attribute of the associate; wherein the plurality of subsystems comprises a governed data label subsystem storing metadata describing how, when and by whom government data stored in one or more external environments is collected, describing how, when and by whom policy data stored in at least one of the plurality of subsystems is collected, the government data comprising data related to government laws or government regulations, the metadata also describing how government data is formatted in the one or more external environments and how policy data is formatted in at least one of the plurality of subsystems; accessing at least one of the plurality of subsystems to retrieve policy data and at least one of the external environments to retrieve government data based at least in part on the metadata; maintaining, using the governed data label subsystem, a table of changes comprising a plurality of changes to enterprise policies, government laws and government regulations, the maintaining comprising escalating one or more of the changes in the table of changes for review in response to one or more requests received from associates of the enterprise; updating the policy data, using the governed data label subsystem, in response to escalating the one or more changes; filtering, using a processor, at least some of the stored customer information that the associate is able to access, wherein filtering comprises: characterizing the data related to the associates and the data related to the customers in order to determine which from a plurality of restriction levels is applicable to the data related to the associates, resulting in a first restriction level, and which from a plurality of restriction levels is applicable to the data related to the customers, resulting in a second restriction level; computing a third restriction level based on a Cartesian product mapping of the first restriction level and the second restriction level, and filtering, based at least in part on the comparison of the data related to the customer with the third restriction level, the updated policy data and the government data; and presenting the filtered stored customer information to the associate.