US 12,147,564 B1
Data subject erasure across multiple distributed data repositories
Shuai Ma, Seattle, WA (US); Jerry Bullard, Kirkland, WA (US); Willy Tanggono, Seattle, WA (US); Ziqing Guo, Redwood City, CA (US); Bo Lyu, Seattle, WA (US); Peng Yao, Seattle, WA (US); Vinay Krishna Nelly, Seattle, WA (US); Keyur Shaileshkumar Patel, Seattle, WA (US); and Nitin Gaur, Seattle, WA (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Dec. 10, 2021, as Appl. No. 17/548,231.
Int. Cl. H04L 29/06 (2006.01); G06F 16/16 (2019.01); G06F 21/62 (2013.01)
CPC G06F 21/6245 (2013.01) [G06F 16/162 (2019.01); G06F 2221/2101 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system, comprising:
a plurality of data repositories configured to store personal data about individual users of a plurality of users;
one or more computers comprising respective processors and memory configured to implement a data deletion notification service to provide a single endpoint to receive deletion requests from the users to delete respective data stored at the plurality of data repositories and to distribute indications of the deletion requests to the plurality of the data repositories, wherein to provide the single endpoint and to distribute the indications the data deletion notification service is configured to:
store registration information for the plurality of data repositories;
receive, at the single endpoint, deletion requests from respective users of the plurality of users to delete personal data about the respective users;
send notifications of the deletion requests to respective ones of the data repositories based on the registration information;
store deletion request records of users of the plurality of users that have requested to have their personal data deleted, wherein the deletion request records comprise respective timestamps for when the respective deletion requests were received by the data deletion notification service;
receive a request from one of the plurality of data repositories for a list of users having requested deletion of personal data since a time specified in the request; and
responsive to the request, based on the deletion request records and timestamps, provide the list of users having requested deletion of personal data since the specified time.