System and method to analyse impact of data breaches on sensitive data

Abstract

A system to analyse impact of data breaches on sensitive data is disclosed. The system includes a hardware processor and memory with program instructions for executing various modules. The data collection module retrieves and enriches impacted data from multiple repositories. The data identification module uses data loss prevention (DLP) and named entity recognition (NER) techniques, enhanced by large language models (LLMs), to accurately identify personal information. The identity deduplication module consolidates individual references using deterministic and probabilistic techniques, while the residency inference module applies machine learning and heuristic methods to determine residency based on various data sources. The analysis module assesses impacted data to identify relevant laws and estimate fines. The automation module streamlines response actions, including generating notifications and ensuring compliance. This system enhances breach response efficiency through integrated, automated analysis and actions.