Patent ID: 7877812

Claim:
A method for enforcing privacy policies associated with data, the method comprising: accessing a database to identify labeled data in the database, the labeled data associated with a privacy policy; determining an access node accessing the label data; for the access node accessing the labeled data, determining whether the access node applies an authorization test as indicated by the privacy policy; associating an authorization test with the access node if the access node does not apply necessary authorization indicated by the privacy policy; wherein with a single control flow path to the access node, associating the authorization test with the access node includes identifying a program point that is in the control flow path prior to the access node and inserting the authorization test at the program point; wherein with multiple control flow paths to the access node, associating the authorization test with the access node includes one of identifying a program point that is common to the control flow paths prior to the access node and inserting the authorization test at the program point and identifying multiple program points in the control flow paths prior to the access node and inserting the authorization test at the multiple program points.