Abstract: Embodiments of the present disclosure may include a computer-assisted method for converting the Indian Personal Data Protection Bill into a question format and storing it in a database, including deciphering the Indian Personal Data Protection Bill using Indian privacy laws. Embodiments may also include converting the Indian Personal Data Protection Bill into a digital format. Embodiments may also include saving the Indian Personal Data Protection Bill in the digital format. Embodiments may also include building a question bank including one or more questions from the saved data. In some embodiments, the question bank may include an electronic library of data privacy protection legal requirements and an inventory of data privacy compliance needs. Embodiments may also include submitting, by a customer, responses to the one or more questions in a yes/no attachments format.
FIELD OF THE INVENTION
The present invention relates to the field of data privacy in general, and more specifically, to a computer-assisted method for converting the Indian Personal Data Protection Bill into a question format and storing it in a digital format in our database, informing the customer with offered subscription whether you are in compliance with the Indian Personal Data Protection Bill (Indian Data Privacy bill)or not; calculating a provisional figure using a penalty calculator(based on question responses and sections in Indian Personal data protection bill)
BACKGROUND OF THE INVENTION
Comprehensive data privacy laws (also known as data protection laws) have been enacted in a number of nations throughout the world, prohibiting the disclosure or misuse of personal information. The Indian Personal Data Protection Bill, 2019 was introduced in Lok Sabha by the Minister of Electronics and Information Technology, and proposes to provide for the protection of personal data of individuals, as well as the establishment of a Data Protection Authority.
The Bill governs the processing of personal data by the following entities: I. by the government, (ii) Indian companies, and (iii) foreign companies dealing with personal data of Indian citizens. Personal data is information about an individual's features, traits, or attributes of identification that can be used to identify them. Certain personal data is classified as sensitive personal data under the bill. Financial data, biometric data, caste, religion or political opinions, or any other category of data established by the government in collaboration with the Authority and the relevant sector regulator are all examples of this.
As a result, it may be important for financial institutions/organizations handling Indian citizen data, such as banks or any other company/organization, to ensure that they are following and working in accordance with Data Privacy Law compliance requirements.
So we are building, A computer-assisted method for converting the Indian Personal Data Protection Bill into a question format and storing it in a digital format in our database, as well as deciphering the Indian Personal Data Protection Bill using Indian privacy laws, are examples of components of the present disclosure.
With our subscriptions, customers will have access to a data privacy compliance module (digitally converted questions) on their dashboard and will be able to submit responses to assessments that are being developed as part of the current disclosure.
BRIEF SUMMARY
[0001] Embodiments of the present disclosure may include a computer-assisted method for converting the Indian Personal Data Protection Bill into a question format and storing it in a database, including deciphering the Indian Personal Data Protection Bill using Indian privacy laws. Embodiments may also include converting the Indian Personal Data Protection Bill into a digital format.
[0002] Embodiments may also include saving the Indian Personal Data Protection Bill in the digital format. Embodiments may also include building a question bank including one or more questions from the saved data. In some embodiments, the question bank may include an electronic library of data privacy protection legal requirements and an inventory of data privacy compliance needs. Embodiments may also include submitting, by a customer, responses to the one or more questions in a yes/no attachments format. Embodiments may also include assessing whether the customer may be in compliance with the Indian Data Protection Bill.
[0003] In some embodiments, the question bank may be stored in a database. In some embodiments, the method may be hosted on a cloud service and accessible via a frontend web URL that may be accessible to the customer via SSO (single sign on). In some embodiments, the method may include, when the assessing may be done, generating, by a system, a PDF. Embodiments may also include informing the customer by publishing, on a dashboard of a customer login portal, whether the customer may be in compliance with the Indian Personal Data Protection Bill/Indian Data privacy Law. Embodiments may also include, based on an assessment that the
customer may be not in compliance, calculating, through a penalty calculator, a provisional figure.
[0004] In some embodiments, calculating the provisional figure may be based on one or more sections of the Indian Personal Data Protection Bill. In some embodiments, calculating the provisional figure may be based on new provisions to be added to the Indian Personal Data Protection Bill in the future. In some embodiments, calculating the provisional figure may be based on an obligation to take prompt and appropriate action in response to a data security breach under section 25, a failure to register with the Authority under sub-section (2)of section 26, an obligation to undertake a data protection impact assessment by a significant data fiduciary under section 27, and an obligation to conduct a data audit by a significant data fiduciary under section 29.
[0005] Embodiments of the present disclosure may also include a system, including a dashboard, including personalized information belonging to a customer. In some embodiments, a customer can log into the system, see the dashboard and the personalized information, and perform an assessment of one or more products on offer. In some embodiments, the customer performs the assessment based on a subscription.
[0006] In some embodiments, the customer can log into the system via SSO. In some embodiments, the customer can create a new assessment. In some embodiments, the customer can resume an old assessment. In some embodiments, the customer can save and/or submit a response to an owner of an assessment. In some embodiments, the customer can attach documents in response to one or more questions in a question bank.
[0007} In some embodiments, the customer can attach documents in the following formats PDF. Embodiments may also include EXCEL. Embodiments may also include images (JPG/JPEG, PNG, etc.). Embodiments may also include a reviewer of an assessment can review a compliance risk based on inputs submitted by assigned members or teams of the assessment.
BRIEF DESCRIPTION OF THE FIGURES
[0008] FIG. 1 is a flowchart illustrating a computer-assisted method for converting the Indian Personal Data Protection Bill, according to some embodiments of the present disclosure.
[0009] FIG. 2 is a flowchart further illustrating the computer-assisted method for converting the Indian Personal Data Protection Bill from FIG. 1, according to some embodiments of the present disclosure.
[0010] FIG. 3 is a block diagram illustrating a system, according to some embodiments of the present disclosure.
COMPLETE SPECIFICATION
[0011} FIG. 1 is a flowchart that describes a computer-assisted method for converting the Indian Personal Data Protection Bill, according to some embodiments of the present disclosure. In some embodiments, at 110, the computer-assisted method may include deciphering the Indian Personal Data Protection Bill using Indian privacy laws. At 120, the computer-assisted method may include converting the Indian Personal Data Protection Bill into a digital format. At 130, the computer-assisted method may include saving the Indian Personal Data Protection Bill in the digital format. At 140, the computer-assisted method may include building a question bank comprising one or more questions from the saved data. At 150, the computer-assisted method may include submitting, by a customer, responses to the one or more questions in a yes/no attachments format. At 160, the computer-assisted method may include assessing whether the customer may be in compliance with the Indian Data Protection Bill. The question bank may comprise an electronic library of data privacy protection legal requirements and an inventory of data privacy compliance needs. In some embodiments, the question bank may be stored in a database. In some embodiments, the method may be hosted on a cloud service and accessible via a frontend web URL that may be accessible to the customer via SSO (single sign on).
[0012J FIG. 2 is a flowchart that further describes the computer-assisted method for converting the Indian Personal Data Protection Bill from FIG. 1,
according to some embodiments of the present disclosure. In some embodiments, at 210, the method may include, when the assessing is done, generating, by a system, a PDF. At 220, the method may include informing the customer by publishing, on a dashboard of a customer login portal, whether the customer may be in compliance with the Indian Data Protection Bill. At 230, the method may include, based on an assessment that the customer may be not in compliance, calculating, through a penalty calculator, a provisional figure. In some embodiments, calculating the provisional figure may be based on one or more sections of the Indian Personal Data Protection Bill. In some embodiments, calculating the provisional figure may be based on new provisions to be added to the Indian Personal Data Protection Bill in the future.
[0013] In some embodiments, calculating the provisional figure may be based on, an obligation to take prompt and appropriate action in response to a data security breach under section 25, a failure to register with the Authority under sub-section (2)of section 26, an obligation to undertake a data protection impact assessment by a significant data fiduciary under section 27, and an obligation to conduct a data audit by a significant data fiduciary under section 29.
[0014] FIG. 3 is a block diagram that describes a system 300, according to some embodiments of the present disclosure. In some embodiments, the system 300 may include a dashboard 310. The dashboard 310 may include personalized information 312 belonging to a customer. A customer can log into the system 300, see the dashboard 310 and the personalized information 312, and perform an assessment of one or more products on offer. The customer may perform the assessment based on a subscription. In some embodiments, the customer can log into the system 300 via SSO.
[0015] In some embodiments, the customer can create a new assessment. The customer can resume an old assessment. The customer can save and/or submit a response to an owner of an assessment. The customer can attach documents in response to one or more questions in a question bank. The customer can attach documents in the following formats: PDF, Excel, and image (JPG/JPEG, PNG, etc.). A reviewer of an assessment can review a compliance risk based on inputs submitted by assigned members or teams of the assessment.
Flow approach/additional Information:
1. Customer /Users access the web application to get the access through SSO.
2. User request validated and reached to Front end web server.
3. Once request reached to Web server and process on the backend with point
4. Webserver connectivity with database for providing dashboard and
5. Database response to webserver & forwarded to front end services with dashboard.
6. As per offered Subscription, User can create assessment, resume, edit and submit the assessment.
7. Question bank in assessment is from the database,
8. User can assign approver/reviewer in the assessment.
9. Once approver approves the assessment and submits the assessment
10. The method may include generating a PDF. This may also include publishing
on the dashboard of the customer login portal whether the user may be in
compliance with the Indian personal Data Protection Bill or not.
,2-
User Request
]i
Customer Using SSO
< 1
Response
M
Web Server
4->
4T
^_
Backend
Database
Customer Portal Dash board
We claim:
1. A computer-assisted method for converting the Indian Personal Data Protection Bill /Act /
Indian Data Privacy Law into a question format and storing it in a database, comprising:
deciphering the Indian Personal Data Protection Bill using Indian privacy laws;
converting the Indian Personal Data Protection Bill /Act / Indian Data Privacy Law into a digital format;
saving the Indian Personal Data Protection Bill /Act / Indian Data Privacy Law in the digital format;
building a question bank comprising one or more questions from the saved data, wherein the question bank comprises an electronic library of data privacy protection legal requirements and an inventory of data privacy compliance needs;
submitting, by a customer, responses to the one or more questions in a yes/no attachments format; and
assessing whether the customer is in compliance with the Indian Data Protection Bill.
2. The computer-assisted method of claim 1, wherein the question bank is stored in a database.
3. The computer-assisted method of claim 1, wherein the method is hosted on a cloud service and accessible via a frontend web URL that is accessible to the customer via SSO (single sign on).
4. The method of claim 1, further comprising:
when the assessing is done, generating, by a system, a PDF;
informing the customer by publishing, on a dashboard of a customer login portal, whether the customer is in compliance with the Indian Data Protection Bill /Act / Indian Data Privacy Law; and
based on an assessment that the customer is not in compliance, calculating, through a penalty calculator, a provisional figure.
5. The method of claim 4, wherein calculating the provisional figure is based on one or more sections of the Indian Personal Data Protection Bill.
6. The method of claim 4, wherein calculating the provisional figure is based on new provisions to be added to the Indian Personal Data Protection Bill in the future.
7. The method of claim 4, wherein calculating the provisional figure is based on:
an obligation to take prompt and appropriate action in response to a data security breach under section 25;
a failure to register with the Authority under sub-section (2) of section 26;
an obligation to undertake a data protection impact assessment by a significant data fiduciary under section 27; and
an obligation to conduct a data audit by a significant data fiduciary under section 29.
8. A system, comprising:
a dashboard, comprising:
personalized information belonging to a customer;
wherein a customer can log into the system, see the dashboard and the personalized information, and perform an assessment of one or more products on offer; and
wherein the customer performs the assessment based on a subscription.
9. The system of claim 8, wherein the customer can log into the system via SSO.
10. The system of claim 8, wherein:
the customer can create a new assessment;
the customer can resume an old assessment;
the customer can save and/or submit a response to an owner of an assessment;
the customer can attach documents in response to one or more questions in a question bank;
the customer can attach documents in the following formats:
PDF;
EXCEL; and
Image (JPG/JPEG, PNG, etc.); and
a reviewer of an assessment can review a compliance risk based on inputs submitted by assigned members or teams of the assessment.
| # | Name | Date |
|---|---|---|
| 1 | 202211025124-Form-9-290422.pdf | 2022-05-05 |
| 2 | 202211025124-Form-5-290422.pdf | 2022-05-05 |
| 3 | 202211025124-Form-3-290422.pdf | 2022-05-05 |
| 4 | 202211025124-Form-2-290422.pdf | 2022-05-05 |
| 5 | 202211025124-Form-18-290422.pdf | 2022-05-05 |
| 6 | 202211025124-Form-1-290422.pdf | 2022-05-05 |
| 7 | 202211025124-FER.pdf | 2022-09-14 |
| 8 | 202211025124-FORM-26 [02-03-2023(online)].pdf | 2023-03-02 |
| 9 | 202211025124-FER_SER_REPLY [02-03-2023(online)].pdf | 2023-03-02 |
| 10 | 202211025124-DRAWING [02-03-2023(online)].pdf | 2023-03-02 |
| 11 | 202211025124-CORRESPONDENCE [02-03-2023(online)].pdf | 2023-03-02 |
| 12 | 202211025124-COMPLETE SPECIFICATION [02-03-2023(online)].pdf | 2023-03-02 |
| 13 | 202211025124-CLAIMS [02-03-2023(online)].pdf | 2023-03-02 |
| 14 | 202211025124-ABSTRACT [02-03-2023(online)].pdf | 2023-03-02 |
| 15 | 202211025124-RELEVANT DOCUMENTS [05-03-2023(online)].pdf | 2023-03-05 |
| 16 | 202211025124-Proof of Right [05-03-2023(online)].pdf | 2023-03-05 |
| 17 | 202211025124-FORM 13 [05-03-2023(online)].pdf | 2023-03-05 |
| 18 | 202211025124-US(14)-HearingNotice-(HearingDate-20-11-2025).pdf | 2025-11-13 |
| 1 | 202211025124searchE_13-09-2022.pdf |