Patent ID: 6904417

Claim:
A method for promoting compliance with data protection and privacy laws and regulations relating to the privacy rights of individuals that comprises: informing an individual involved in potential disclosure of his/her personal data to an entity that the entity has certified its compliance with approved privacy and data security practices that conform to relevant data protection and privacy laws and regulations covering the use of personal data in at least the individual's or the entity's country of location; obtaining the individual's consent to have the entity receive, or acknowledgment that the entity will receive, and use his/her personal data in accordance with a stated policy or with relevant data protection and privacy laws and regulations covering the use of personal data in at least the individual's or the entity's country of location; transmitting to the entity data indicating that the individual has been informed of the entity's privacy practices and consented to the entity receiving, or acknowledged that the entity will be receiving, and using his/her personal data in accordance with its stated policy or with relevant data protection and privacy laws and regulations covering the use of personal data in at least the individual's or the entity's country of location; receiving from the entity data comprising personal data collected by the entity from the individual; storing said personal data received from the entity; periodically checking whether the entity has complied with the stated policy or with relevant data protection and privacy laws and regulations covering the use of personal data in at least the individual's or the entity's country of location; and wherein the steps of informing the individual, obtaining the individual's consent or acknowledgment, transmitting data to the entity, and receiving data from the entity are performed over a computer network.