Cloud computing service providers have large numbers of notices, consents, and controls (NCCs). It is infeasible for engineers to understand most or the entirety of the NCCs, when or if they should be checked, and how to implement logic that appropriately complies with them. This disclosure describes techniques that define a mechanism for, and enforce a requirement to, provide structured information about NCCs that data are collected under. NCCs are described in a structured fashion using code. Prior to initiating upload from a client device, the code ascertains if upload of the data is permissible. If permissible, the data upload is allowed and metadata relating to the reasons for data collection is persisted to ensure compliant downstream usage of data. If data upload is not permissible, the upload is prevented, and indicators generated for the appropriate developer team to review.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Chandwaney, Ashok; Zhou, Cindy; Archer, Branden; and Calinoiu, Silviu, "Automated Enforcement, Monitoring, and Satisfaction of Notices, Consents, and Controls", Technical Disclosure Commons, (August 29, 2023)