Internal privacy invasion detection and prevention system

Abstract

Data privacy administration is described, including receiving, with a computer system, resource access records that correspond to accesses of user resources by an administrator of an application that stores the user resources; processing, with the computer system, the resource access records to generate structured audit records that correspond to the resource access records, the structured audit records includes a resource identifier that corresponds to the resource that was accessed and an accessed-by identifier that indicates an administrator that accessed the resource; and analyzing the structured audit records using a plurality of resource privacy modules that include resource privacy rules that define violation detection scores specifying likelihoods of whether one or more resource accesses are problematic accesses, wherein the resource privacy modules are provided from two or more different domains.