Proxy and veto services in data privacy integration scenarios
The present disclosure involves systems, software, and computer implemented methods for integrated data privacy services. An example method includes determining to initiate an integrated end of purpose protocol for an object. An end-of-purpose query is provided to multiple applications that requests each application to determine whether the application is able to block the object. End-of-purpose statuses are received, in response to the end-of-purpose query, that each indicate whether a respective application is able to block the object. The end-of-purpose statuses are evaluated to determine whether an aligned end of purpose has been reached for the object. In response to determining that the aligned end of purpose has been reached for the object, a block command is provided to each application that instructs the application to locally block the object in the application.
1 . A computer-implemented method comprising:
receiving, by at least one rule service and from a data privacy integration service in a multiple-application landscape, a data privacy request for a vote regarding a master data object, wherein the data privacy request is also received from the data privacy integration service by multiple other applications in the multiple-application landscape;
determining, by at least one rule service, a respective vote for the rule service regarding the master data object, based on evaluation by the rule service of at least one preconfigured rule configured in the rule service for a type of the master data object; and
providing, by each rule service that determined a respective vote, to the data privacy integration service, the respective vote determined by the rule service, wherein the data privacy integration service uses votes provided by other applications and at least one vote provided by at least one rule service to determine a consensus vote for the master data object for the data privacy request, wherein vote providers comprise responders of the data privacy request.
2 . The computer-implemented method of claim 1 , wherein:
the data privacy integration service comprises an integrated end-of-purpose protocol handler;
the data privacy request for the vote regarding the master data object queries a respective responder as to whether the respective responder can block the master data object; and
the integrated end-of-purpose protocol handler determines the consensus vote by determining whether any vote provided by a responder indicates the responder is unable to block the master data object.
3 . The computer-implemented method of claim 1 , wherein:
the data privacy integration service comprises an aligned purpose disassociation protocol handler;
the data privacy request for the vote regarding the master data object queries a respective responder as to whether the respective responder can disassociate a purpose from the master data object; and
the aligned purpose disassociation protocol handler determines the consensus vote by determining whether any vote provided by a responder indicates the responder is unable to disassociate the purpose from the master data object.
4 . The computer-implemented method of claim 1 , wherein the rule service evaluates a rule that specifies that a default vote should be provided by the rule service if the rule service does not otherwise determine a vote within a predetermined time period.
5 . The computer-implemented method of claim 4 , wherein the rule service forwards the data privacy request to an administrator and provides the default vote if the administrator does not provide a vote within the predetermined time period.
6 . The computer-implemented method of claim 5 , wherein information from the data privacy request is presented to the administrator in a user interface of an administrative application.
7 . The computer-implemented method of claim 6 , wherein the administrator provides the vote in the user interface of the administrative application and the administrative application provides the vote to the rule service.
8 . The computer-implemented method of claim 4 , wherein the rule service forwards the data privacy request to a different system and provides the default vote if the different system does not provide a vote within the predetermined time period.
9 . The computer-implemented method of claim 8 , wherein the different system is external to and not connected to the data privacy integration service and the rule service connects to the different system on behalf of the data privacy integration service.
10 . The computer-implemented method of claim 8 , wherein the rule service:
receives a data privacy response to the data privacy request from the different system; and
translates the data privacy response received from the different system from a first format used by the different system to a second format used by the data privacy integration service.
11 . The computer-implemented method of claim 4 , wherein the default vote is determined based on a mode of the rule service, wherein in a first mode, the rule service determines a default no vote and in a second mode the rule service determines a default yes vote.
12 . A computer-implemented system comprising:
one or more computers; and
a computer-readable medium coupled to the one or more computers having instructions stored thereon which, when executed by the one or more computers, cause the one or more computers to perform operations comprising:
receiving, by at least one rule service and from a data privacy integration service in a multiple-application landscape, a data privacy request for a vote regarding a master data object, wherein the data privacy request is also received from the data privacy integration service by multiple other applications in the multiple-application landscape;
determining, by at least one rule service, a respective vote for the rule service regarding the master data object, based on evaluation by the rule service of at least one preconfigured rule configured in the rule service for a type of the master data object; and
providing, by each rule service that determined a respective vote, to the data privacy integration service, the respective vote determined by the rule service, wherein the data privacy integration service uses votes provided by other applications and at least one vote provided by at least one rule service to determine a consensus vote for the master data object for the data privacy request, wherein vote providers comprise responders of the data privacy request.
13 . The computer-implemented system of claim 12 , wherein:
the data privacy integration service comprises an integrated end-of-purpose protocol handler;
the data privacy request for the vote regarding the master data object queries a respective responder as to whether the respective responder can block the master data object; and
the integrated end-of-purpose protocol handler determines the consensus vote by determining whether any vote provided by a responder indicates the responder is unable to block the master data object.
14 . The computer-implemented system of claim 12 , wherein:
the data privacy integration service comprises an aligned purpose disassociation protocol handler;
the data privacy request for the vote regarding the master data object queries a respective responder as to whether the respective responder can disassociate a purpose from the master data object; and
the aligned purpose disassociation protocol handler determines the consensus vote by determining whether any vote provided by a responder indicates the responder is unable to disassociate the purpose from the master data object.
15 . The computer-implemented system of claim 12 , wherein the rule service evaluates a rule that specifies that a default vote should be provided by the rule service if the rule service does not otherwise determine a vote within a predetermined time period.
16 . The computer-implemented system of claim 15 , wherein the rule service forwards the data privacy request to an administrator and provides the default vote if the administrator does not provide a vote within the predetermined time period.
17 . A non-transitory, computer-readable medium coupled to one or more processors and having instructions stored thereon which, when executed by the one or more processors, cause the one or more processors to perform operations, the operations comprising:
receiving, by at least one rule service and from a data privacy integration service in a multiple-application landscape, a data privacy request for a vote regarding a master data object, wherein the data privacy request is also received from the data privacy integration service by multiple other applications in the multiple-application landscape;
determining, by at least one rule service, a respective vote for the rule service regarding the master data object, based on evaluation by the rule service of at least one preconfigured rule configured in the rule service for a type of the master data object; and
providing, by each rule service that determined a respective vote, to the data privacy integration service, the respective vote determined by the rule service, wherein the data privacy integration service uses votes provided by other applications and at least one vote provided by at least one rule service to determine a consensus vote for the master data object for the data privacy request, wherein vote providers comprise responders of the data privacy request.
18 . The computer-readable medium of claim 17 , wherein:
the data privacy integration service comprises an integrated end-of-purpose protocol handler;
the data privacy request for the vote regarding the master data object queries a respective responder as to whether the respective responder can block the master data object; and
the integrated end-of-purpose protocol handler determines the consensus vote by determining whether any vote provided by a responder indicates the responder is unable to block the master data object.
19 . The computer-readable medium of claim 17 , wherein:
the data privacy integration service comprises an aligned purpose disassociation protocol handler;
the data privacy request for the vote regarding the master data object queries a respective responder as to whether the respective responder can disassociate a purpose from the master data object; and
the aligned purpose disassociation protocol handler determines the consensus vote by determining whether any vote provided by a responder indicates the responder is unable to disassociate the purpose from the master data object.
20 . The computer-readable medium of claim 17 , wherein the rule service evaluates a rule that specifies that a default vote should be provided by the rule service if the rule service does not otherwise determine a vote within a predetermined time period.