Patent ID: 8626671

Claim:
A computer-implemented system for data breach compliance, comprising: memory having at least one region for storing computer executable program code; and processor for executing the computer executable program code stored in the memory, where the computer executable program code comprises: code for receiving information related to an organization; code for receiving breach information relating to a data breach event of the organization, the breach information including breach event description information, compromised personally identifiable information (PII), and remediation action information; code for generating a breach report based on the breach information, the organization related information, and one or more rules related to data breach; code for determining, based on a comparison of the organization related information, the breach information, and one or more of the following: state rules, federal rules, international rules, industry standards, and rules applicable to the breach event, whether the breach report is in the proper format; code for modifying the breach report, if it is determined that the proper format is an entity specific format, to include predetermined data entry fields; code for selecting one or more reporting entities based on one or more geographic locations associated with the data breach event, where the one or more geographical locations are determined based on the organization related information, the breach information, and the one or more rules, the code for selecting comprising: code for determining, if the one or more geographic locations are in the United States, any applicable attorney general reporting rules and applicable long reach rules associated with the one or more geographical locations, code for selecting one or more reporting entities based on the applicable attorney general reporting rules and the applicable long reach rules, and code for selecting, if the breach information indicates the breach is related to an international jurisdiction, one or more reporting entities based on rules associated with the international jurisdiction; code for selecting one or more reporting entities based on one or more types of breached data, where the one or more types of breached data are determined based on the compromised PII, the selecting comprising: code for selecting, if the breached data includes health care related information, at least one reporting entity associated with health care, code for selecting, if the breached data includes credit card related information, at least one credit card related entity, and code for selecting a reporting entity based on one or more of rules, regulations, and laws associated with the compromised PII; code for outputting, if the breach information indicates the breach is related to the United States, the breach report to a United States agency; and code for outputting the breach report to the one or more reporting entities.