| 摘要 |
Systems and methods for managing data in compliance with privacy, security and/or retention standards in business industries. A dynamic and customizable archival and retrieval system allows for information and documentation to be placed and made available in the system. The document type and identifying information for that document type are described. Definitions are established for the documents being managed, the data identifying the documents, and the retention policies for the documents. The documents are associated with the identifying data for a particular set of records. A single point of entry is provided for external and/or internal requests, and/or a single point of exit is provided for transmissions of information, wherein the transmissions to requestors include information that is individually approved. Moreover, digital authorizations and consents for retrieval from external data sources may be utilized. |
| 主权项 |
1. A method, implemented by a computing system, for providing a single point of entry for accessing business documents obtained from a plurality of external sources in compliance with privacy, security and retention standards, the method comprising:
establishing, on one or more computer readable media accessible by the computer system, a repository of business documents that are obtained from a plurality of external sources such that the repository comprises a single point of entry for accessing the business documents, wherein access to the business documents is governed by one or more regulations based on the content of each business document, each business document stored in the repository including an associated identifier: receiving, by the computer system, a request for a first business document stored in the repository, the request including the identifier associated with the first business document; determining, by the computer system, whether the first business document is subject to a regulated requirement based on the content of the first business document that would preclude release of the first business document to the requestor, wherein the regulated requirement is a pre-established professional requirement that precludes release of the content of the first business document to the requestor; determining, by the computer system, whether consent of an individual of which the content pertains is required and whether the consent of the individual has been obtained if the consent is required such that;
when the requested information is not subject to the requirement and the consent of the individual has been obtained when the consent is required, the computing system accesses the first business document from within the repository using the identifier associated with the first business document and releases the first business document to the requestor; andwhen the requested information is subject to the requirement, the computing system fails to provide the first business document to the requestor. |
