Abstract: A data manager in an enterprise provides data management of users' personal data, which is used by enterprise applications to support operations in the enterprise. The data manager obtains personal data from the enterprise applications via the use of corresponding connector modules. The data manager communicates with each connector module, which then communicates with its corresponding enterprise application to obtain personal data used by that application. The data manager can also communicate with a central database that can store personal data used by the enterprise applications. The central database can serve as a central store of personal data for the enterprise applications.

Abstract: Techniques and solutions are described for facilitating data archival, including for improving compliance with retention policies and legal requirements. Data objects can be assigned an expiration date based on properties of the data objects and rules associated with such properties. The data objects can be stored in an archive. In some cases, the data objects can be automatically deleted when the expiration date passes. In other cases, the data objects can be manually deleted when the expiration date passes, with deletion not occurring, and an error being generated, if the expiration date has not passed. Unstructured data objects can be associated with structured data objects through association lists, where an association list can be used to delete such unstructured data objects with or without deletion of an associated structured data object, and where the unstructured data objects can be linked with retention policy information of the structured data object.

Abstract: A data manager in an enterprise provides data management of users' personal data, which is used by enterprise applications to support operations in the enterprise. The data manager obtains personal data from the enterprise applications via the use of corresponding connector modules. The data manager communicates with each connector module, which then communicates with its corresponding enterprise application to obtain personal data used by that application. The data manager can also communicate with a central database that can store personal data used by the enterprise applications. The central database can serve as a central store of personal data for the enterprise applications.

Abstract: The user of an application may query a data storage system with a request to access a dataset from a database of the system. The system identifies at least one data access rule that is applicable to the dataset, with the at least one data access rule specifying at least one user group authorized to access a restricted portion of the dataset. The system identifies an authorized access group associated with the application user and compares it to the at least one user group authorized to access the restricted portion of the dataset. If the authorized access group associated with the user does not match one of the at least one user group authorized to access the restricted portion of the dataset, the system assembles a modified dataset based on the dataset and the at least one data access rule and transmits the modified dataset to the application.

Abstract: Techniques and solutions are described for facilitating data archival, including for improving compliance with retention policies and legal requirements. Data objects can be assigned an expiration date based on properties of the data objects and rules associated with such properties. The data objects can be stored in an archive. In some cases, the data objects can be automatically deleted when the expiration date passes. In other cases, the data objects can be manually deleted when the expiration date passes, with deletion not occurring, and an error being generated, if the expiration date has not passed. Unstructured data objects can be associated with structured data objects through association lists, where an association list can be used to delete such unstructured data objects with or without deletion of an associated structured data object, and where the unstructured data objects can be linked with retention policy information of the structured data object.

Abstract: The user of an application may query a data storage system with a request to access a dataset from a database of the system. The system identifies at least one data access rule that is applicable to the dataset, with the at least one data access rule specifying at least one user group authorized to access a restricted portion of the dataset. The system identifies an authorized access group associated with the application user and compares it to the at least one user group authorized to access the restricted portion of the dataset. If the authorized access group associated with the user does not match one of the at least one user group authorized to access the restricted portion of the dataset, the system assembles a modified dataset based on the dataset and the at least one data access rule and transmits the modified dataset to the application.