Rules-based data access systems and methods

摘要

Methods and systems for rules-based data access are described. In some embodiments, a request for access to customer data by a requesting entity is received; the data is categorized; the person's preferences with respect to allowing access to data are compiled; a requesting entity is determined; and the providing entity that collected each requested data item is determined. Data shareability rules are evaluated based on the policies that regulate the access of the customer data, the customer preferences, the requesting entity, and the providing entity; and the customer data is provided to the requesting entity according to the evaluation.

主权项

1. A method comprising:
receiving a request for access to customer data from a requesting entity; categorizing the customer data based on a type of the customer data and policies that regulate the access to the customer data,
wherein the policies comprise government regulations, business protocols, and contractual restrictions; compiling customer preferences relating to the access to the customer data; determining the requesting entity based on at least one of the following: a user, a servicing application, or an organizational entity associated with the request; determining a providing entity, wherein the providing entity collected the customer data; evaluating data shareability rules based on the policies that regulate the access to the customer data, the customer preferences, the requesting entity, and the providing entity,
wherein evaluations of the customer data comprise conditionally shareable, prohibited from sharing, and shareable,wherein the customer data evaluated as conditionally shareable comprises data that can be accessed by the requesting entity with consent from a customer,wherein the customer data evaluated as prohibited from sharing comprises data that cannot be accessed regardless of the consent from the customer,wherein the customer data evaluated as shareable comprises data that can be accessed without the consent from the customer, andwherein when none of the customer preferences are compiled, the data shareability rules are further based on default customer preferences; providing the access to the requesting entity according to the evaluation of the data shareability rules; and demonstrating compliance with applicable laws.