US 11,899,622 B2
Management of erasure or retention of user data stored in data stores
Suhail Sadiq, Singapore (SG); Alejandro Picos, New York, NY (US); Vladimir Bacvanski, Portola Valley, CA (US); Devdatta Rivonkar, Chennai (IN); and Rahul Mahendrakumar, Chennal (IN)
Assigned to PayPal, Inc., San Jose, CA (US)
Filed by PayPal, Inc., San Jose, CA (US)
Filed on Jul. 12, 2021, as Appl. No. 17/372,839.
Claims priority of application No. 202141023781 (IN), filed on May 28, 2021.
Prior Publication US 2022/0382713 A1, Dec. 1, 2022
Int. Cl. G06F 16/00 (2019.01); G06F 16/16 (2019.01); G06F 16/901 (2019.01); G06F 16/27 (2019.01); G06F 16/2458 (2019.01)
CPC G06F 16/162 (2019.01) [G06F 16/2471 (2019.01); G06F 16/27 (2019.01); G06F 16/9024 (2019.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
a processor that executes computer-executable components stored in a memory, the computer-executable components comprising:
an erasure request component that receives an erasure request that requests a set of data associated with a user account be erased from a set of data stores that stores sets of data associated with user accounts, comprising the set of data associated with the user account;
an erasure component that:
in response to the erasure request, determines, based on an analysis of a first rule of a set of rules and information relating to the user account, eligibility for erasure a first portion of the set of data from the set of data stores;
in response to the determination of the first portion, determines, based on an analysis of a second rule of the set of rules and information relating to the user account, ineligibility for erasure of a second portion of the first portion of the set of data from the set of data stores; and
in response to the determination of eligibility, automatically erases a third portion of the set of data, the third portion comprising all data in the first portion that are not in the second portion; and
a mask component that:
in response to the erasure of the third portion of the set of data, generates mask data corresponding to the third portion of the set of data; and
replaces the erased third portion in the set of data stores with the corresponding mask data, the mask data configured to maintain a validity of a link to the third portion,
wherein the set of rules is determined based on a set of obligations associated with the set of data stores and is related to data erasure and data retention, and
wherein the information comprises an activity status associated with the user account.