| CPC G06F 21/6245 (2013.01) [G06F 16/2379 (2019.01); G06Q 10/105 (2013.01); G06Q 10/1095 (2013.01)] | 18 Claims |

|
1. A method of controlling data collection and use, the method for use with at least a first sensor located within an employer facility designed to sense at least a first parameter associated with each of a first employee and a second employee and an interface device, the method comprising the steps of:
persistently receiving data from the at least a first sensor wherein the data is related to the at least a first parameter associated with the first employee and the at least a first parameter associated with the second employee;
storing the received data in a temporary private database that is inaccessible by at least a first application program, wherein the first application program is designed to implement services controlled by an employer or a third party, the stored data in the temporary private database including redaction period data corresponding to data collected during a predefined most recent retroactive redaction period, the redaction period data corresponding to data collected during the predefined most recent retroactive redaction period being most recent first redaction period data;
tracking time since the stored data has been collected;
persistently presenting at least a first redaction option to at least one of the first employee and the second employee via the interface device selectable to render at least a subset of the most recent first redaction period data associated with an employee that selected the first redaction option permanently inaccessible to the at least a first application program;
upon selection of the first redaction option by at least one of the first and second employees, identifying an employee that selected the first redaction option and rendering the at least a subset of the most recent first redaction period data associated with the employee that selected the first redaction option permanently inaccessible to the at least a first application program without rendering a subset of the most recent first redaction period data associated with the other of the first and second employees inaccessible; and
for stored data collected prior to the predefined most recent retroactive redaction period that has not been rendered permanently inaccessible via selection of the first redaction option, automatically releasing the stored data for use by the at least a first application program.
|