System and method for verified compliance implementation

• US 10,395,185 B2
• Filed: 03/16/2012
• Issued: 08/27/2019
• Est. Priority Date: 03/16/2012
• Status: Active Grant

• Current Assignee: Refinitiv US Organization, LLC (Refinitiv US Holdings, Inc.)
• Original Assignee: Refinitiv US Organization, LLC (Refinitiv US Holdings, Inc.)
• Inventors: Dick, Zane, Lalonde, Gary, Pulver, Janna, Seidel, Rowan C., Thody, Lora
• Primary Examiner(s): Gilkey, Carrie S
• Application Number:
  US13/422,955
• Publication Number:
  US 20130246292A1
• Time in Patent Office: 2,720 Days
• Field of Search: 705317, 705342, 705344
• CPC Class Codes: G06Q 10/00 Administration; Management

Abstract

A compliance computer creates compliance documents referencing one or more rules with which an entity must comply and/or a jurisdiction and topic related to rules with which the company must comply. For example, the compliance documents may identify one or more jurisdictions in which the company operates, one or more topics associated with the company, and/or specific provisions set by specific rules. A transmission object is created based on the compliance documents. The transmission object includes general information pertinent to the rules and/or the entity (e.g., jurisdictional or topical information). An operator server receives one or more transmission objects from one or more compliance computers. The operator server identifies rules pertinent to each transmission object and conducts a search to determine whether any of those rules have been modified. The operator server sends a signal that is associated with the one or more compliance rules to the compliance computer.

Claims

1. A computer-implemented method for a first entity to receive, from a second entity, an update to a compliance rule referenced in a compliance document containing confidential information of the first entity, the method comprising:

analyzing the compliance document of the first entity using one or more processors in order to identify a reference to the compliance rule in the compliance document of the first entity and a section of the compliance document in which the compliance rule is referenced;

creating metadata identifying the reference to the compliance rule and the section of the compliance document in which the compliance rule is referenced;

creating an electronic transmission object by the one or more processors by incorporating the metadata identifying the reference to the compliance rule and the section of the compliance document in which the compliance rule is referenced without incorporating the confidential information of the compliance document into the electronic transmission object;

sending the electronic transmission object by the one or more processors to the second entity that uses the metadata identifying the reference to the compliance rule in the compliance document to identify an update to the compliance rule and that compiles the update to the compliance rule into a notification along with the metadata from the electronic transmission object identifying the section of the compliance document in which the compliance rule is referenced; and

receiving, from the second entity in response to the step of sending the electronic transmission object, the notification identifying the update to the compliance rule and the section of the compliance rule in which the compliance rule is referenced.

2. The method of claim 1, wherein the metadata in the electronic transmission object identifies a set of jurisdictions and a set of topics.

3. The method of claim 1, wherein the update to the compliance rule is a modification to the compliance rule, and wherein the method further comprises:

using the notification identifying the section of the compliance document in which the compliance rule is referenced to locate that section; and

updating the compliance document by incorporating the modification into that section of the compliance document.

4. The method of claim 1, further comprising:

receiving a template containing a prompt for information relating to the compliance rule, wherein the information includes jurisdictions in which the first entity operates or a topic of operations for the first entity; and

using the information prompted by the template to create the compliance document for the first entity by generating the reference to the compliance rule in the section of the compliance document.

5. The method of claim 1, further comprising:

creating a profile that identifies an area of operations for the first entity;

transmitting the profile to the second entity; and

receiving a template from the second entity, wherein the template includes a prompt to input the reference to the compliance rule into particular sections of the compliance document, and wherein the prompt is based on the area of operations identified in the profile; and

inputting the reference to the compliance rule into the particular sections of the compliance document.

6. The method of claim 5, wherein the compliance document includes instructions on how the first entity responds to a violation of the compliance rule, wherein creating the electronic transmission object by incorporating the metadata excludes those instructions from the electronic transmission object.

7. The computer-implemented method of claim 1, wherein the metadata identifying the section of the compliance document in which the compliance rule is referenced is human-readable metadata.

8. A computer-based system for receiving updates to a compliance rule referenced in a company compliance manual while preserving privacy with respect to company-specific compliance policies in the compliance manual, the system comprising:

one or more processors;

an incorporation module containing instructions that, when executed by the one or more processors, cause the one or more processors to;

parse a citation to a compliance rule in the company compliance manual from company-specific compliance policies regarding the compliance rule in the company compliance manual; and

create an electronic transmission object that include the citation to the compliance rule in the company compliance manual without including the company-specific compliance policies regarding the compliance rule from the company compliance manual;

a review module configured to use the one or more processors to present the citation to the compliance rule in the electronic transmission object to a user for approval;

a communications module configured to send the electronic transmission object to an entity responsible for receiving the electronic transmission object, using the citation to identify updates to the compliance rule, and compiling the updates to the compliance rule into a notification;

an update module configured to use the one or more processors to receive the notification from the entity in response to sending the electronic transmission object, the notification conveying an update to the compliance rule in the company compliance manual;

a compliance manual search module configured to search the company compliance manual for references to the compliance rule; and

a compliance manual tagging module configured to create metadata associated with the references identified by the compliance manual search module, wherein the only data that are incorporated into the electronic transmission object are the created metadata associated with the compliance rule.

9. A computer-implemented method for updating a compliance document with respect to regulatory changes without exposing confidential information in the compliance document, the method comprising:

analyzing a compliance document of a first entity by one or more processors within a computer system of the first entity, wherein the compliance document includes a citation to at least one compliance rule at a specific location in the compliance document and at least one policy specific to the first entity regarding its compliance with the compliance rule, and wherein analyzing the compliance document includes;

parsing the confidential information in the compliance document, including parsing at least one policy specific to the first entity in the compliance document from the citation to the compliance rule in the compliance document; and

identifying the specific location of the citation in the compliance document;

creating an electronic transmission object by the one or more processors within the computer system of the first entity by compiling metadata comprising the citation to the compliance rule from the compliance document and the specific location of the citation in the compliance document into the electronic transmission object in place of the confidential information of the at least one policy specific to the first entity from the compliance document;

sending the electronic transmission object by the one or more processors within the computer system of the first entity to an operator server of a second entity, wherein the operator server of the second entity is configured to analyze the electronic transmission object to extract the compliance rule in the electronic transmission object, search an operator server database to identity an update to the compliance rule, analyze the electronic transmission object to extract the specific location of the citation in the compliance document, and compile the update and the specific location of the citation in the compliance document into a notification;

receiving the notification from the operator server of the second entity by the one or more processors within the computer system of the first entity in response to sending the electronic transmission object to the operator server of the second entity, the notification including the update to the compliance rule from the operator server of the second entity and the specific location of the citation in the compliance document; and

updating the compliance document of the first entity by the one or more processors within the computer system of the first entity using the update to the at least one compliance rule and the specific location of the citation in the notification from the operator server of the second entity.

10. The computer-implemented method of claim 9, wherein the confidential information of the at least one policy specific to the first entity contains at least one of the following:

instructions from the first entity on how to respond if the first entity is not in compliance with the compliance rule;

guidelines from the first entity for ensuring compliance with the compliance rule;

statements from the first entity regarding prior actions with respect to compliance with the compliance rule; and

employee identification of employees of the first entity.

11. The computer-implemented method of claim 9, further comprising:

creating a profile for the first entity that identifies areas of operations for satellite locations of the first entity;

transmitting the profile to the operator server of the second entity; and

receiving a template from the operator server of the second entity, wherein the template includes a prompt to input the citation to the compliance rule into a particular section of the compliance document that corresponds to one of the satellite locations, and wherein the prompt is based on an area of operations identified in the profile for that satellite location; and

inputting the citation prompted by the template into the particular section of the compliance document.

12. The computer-implemented method of claim 9, wherein the confidential information of the at least one policy regarding the compliance rule includes a first policy pertaining to a first satellite location regarding the compliance rule and a second policy pertaining to a second satellite location regarding the compliance rule, wherein the first policy and the second policy differ.

13. The computer-implemented method of claim 9, further comprising creating a template that identifies sections of the compliance document containing keywords associated with the compliance rule, wherein analyzing the compliance document of the entity include analyzing only those sections identified in the template.

14. The computer-implemented method of claim 9, further comprising a step of creating the compliance document by the one or more processors within the computer system of the first entity, the computer system being configured to maintain that compliance document away from external websites.

15. The computer-implemented method of claim 14, further comprising receiving a template from the operator server of the second entity, wherein the template includes a prompt to input key words relating to an area of operations for the first entity into particular sections of the compliance document, and creating the compliance document by the one or more processors within the computer system of the first entity includes inputting the key words relating to the area of operations for the first entity into particular sections of the compliance document.

16. The computer-implemented method of claim 9, wherein the compliance document is a compliance manual.