Abstract

Currently, there are several off-the-shelf Personal Identifiable Information (PII) scanning tools available as an assistive tool to find the PII in the network and system endpoints such as server, personal computer, devices, or cloud storage. Most tools have been designed to support General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPPA), California Consumer Privacy Act (CCPA) etc. In Thailand, the Personal Data Protection Act (PDPA) will be enforced in May 2021. Organizations in Thailand are thus now going to be faced with more challenges in relation to security and privacy than they have ever had before. In this paper, we propose a AP2I system which is an adaptive PII scanning and discovery tool for helping the organization to automatically discover and manage PII for enhancing their privacy policy and satisfying PDPA compliance. Our AP2I consists of four key modules including (1) Converter converting text to csv format, (2) PII Scanner scanning the PII based on the extended function of Presidio, (3) Consent checker checking the analyzer and recognizer function of Presidio for the scanning process, and (4) PII inventory storing well-organized PII identifying PII records, data subject, and their source. We also conducted the experiment to demonstrate the efficiency of our proposed system.

Talk to us

Join us for a 30 min session where you can share your feedback and ask us any queries you have

Schedule a call

Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.