Method, apparatus, and system for automated purpose limitation and compatibility verification on a data platform
An approach is provided for automated purpose limitation and compatibility verification on a data platform. The approach, for example, involves generating metadata that indicates a purpose that has been allowed for processing a dataset. The approach also involves storing the metadata in a metadata catalog to associate the purpose with the dataset. The approach further involves querying the metadata catalog to perform a verification of a compatibility of the purpose with a requested purpose for a new processing activity of the dataset, to perform a limitation of the new processing activity, or a combination thereof.
1. A computer-implemented method comprising:
generating metadata that indicates (1) a purpose that has been allowed for processing a dataset, and (2) a method of creation of the purpose, wherein the method of creation of the purpose is a mechanism by which the purpose is specified;
storing the metadata in a metadata catalog to associate the purpose with the dataset; and
querying the metadata catalog to perform a verification of a compatibility of the purpose with a requested purpose for a new processing activity of the dataset, to perform a limitation of the new processing activity, or a combination thereof.
2. The computer-implemented method of claim 1 , wherein the method of creation is selected from among a first mechanism comprising by consent and a second mechanism comprising by contract.
3. The computer-implemented method of claim 1 , wherein the method of creation includes by consent, by contract, by law, or a combination thereof.
4. The computer-implemented method of claim 1 , wherein the purpose is selected from an ontology of known purposes.
5. The computer-implemented method of claim 1 , wherein the purpose is parsed from privacy policy data, consent data, contract data, or a combination thereof associated with the dataset based on an ontology of known purposes.
6. The computer-implemented method of claim 1 , further comprising:
determining one or more subpurposes that has been allowed for processing the dataset from an ontology of known purposes based on the purpose and a hierarchy of the known purposes in the ontology,
wherein the metadata further associates the one or more subpurposes with the dataset.
7. The computer-implemented method of claim 1 , wherein the metadata catalog includes a natural language description text of the purpose.
8. The computer-implemented method of claim 7 , further comprising:
providing the natural language description text as an output template from the metadata catalog.
9. The computer-implemented method of claim 1 , further comprising:
providing a user interface for browsing, querying, or a combination thereof the dataset among a set of available datasets based on the purpose.
10. The computer-implemented method of claim 1 , further comprising:
receiving a request to repurpose the dataset by adding a new purpose that is allowed for processing the dataset;
generating a template for a method of creation of the new purpose; and
providing the template as an output.
11. The computer-implemented method of claim 1 , further comprising:
receiving a request to revoke the purpose for a subset of the dataset;
generating a derived dataset that does not contain the subset of the dataset associated with the request; and
updating the metadata catalog to associate the metadata indicating the purpose with the derived dataset.
12. The computer-implemented method of claim 1 , wherein the processing of the dataset results in a derived dataset, the method further comprising:
updating the metadata catalog to associate the metadata indicating the purpose with the derived dataset.
13. The computer-implemented method of claim 1 , further comprising:
recommending an alternate dataset for the new processing activity based on determining that the verification of the compatibility of the requested indicates that the dataset is not compatible.
14. An apparatus comprising:
at least one processor; and
at least one memory including computer program code for one or more programs, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
generate metadata that indicates (1) a purpose that has been allowed for processing a dataset, and (2) a method of creation of the purpose, wherein the method of creation of the purpose is a mechanism by which the purpose is specified;
store the metadata in a metadata catalog to associate the purpose with the dataset; and
query the metadata catalog to perform a verification of a compatibility of the purpose with a requested purpose for a new processing activity of the dataset, to perform a limitation of the new processing activity, or a combination thereof.
15. The apparatus of claim 14 , wherein the method of creation is selected from among a first mechanism comprising by consent and a second mechanism comprising by contract.
16. The apparatus of claim 14 , wherein the method of creation includes by consent, by contract, by law, or a combination thereof.
17. The apparatus of claim 14 , wherein the purpose is selected from an ontology of known purposes.
18. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform:
generating metadata that indicates (1) a purpose that has been allowed for processing a dataset, and (2) a method of creation of the purpose, wherein the method of creation of the purpose is a mechanism by which the purpose is specified;
querying the metadata catalog to perform a verification of a compatibility of the purpose with a requested purpose for a new processing activity of the dataset, to perform a limitation of the new processing activity, or a combination thereof.
19. The non-transitory computer-readable storage medium of claim 18 , wherein the method of creation is selected from among a first mechanism comprising by consent and a second mechanism comprising by contract.
20. The non-transitory computer-readable storage medium of claim 18 , wherein the method of creation includes by consent, by contract, by law, or a combination thereof.