Regulation Chatbots

Applications

MARKET POTENTIAL The scope of this market challenge is huge as the regulatory fabric impacts every person and every organisation on this planet. To understand the scope, it is important to define the regulatory fabric. The regulatory fabric covers national laws, statutes, regulators’ handbooks, quality standards, such as ISO, and their deployment through policies, procedures and controls. In essence, the regulatory fabric consists of rule-based knowledge, mostly contained in documents. At the core of the regulatory fabric is rule-based knowledge designed to safeguard society, people and organisations. This includes the associated forms, surveys and questionnaires used for contextual data input. By treating rule-based knowledge and the associated data input as a market in its own right then the size of the opportunity is huge and is largely untapped in terms of digital transformation. The regulatory fabric impacts every industry, some more than others. For example, in Financial Services alone there is over 50,000 regulatory updates a year . A GDPR application Introduction To help partners rapidly deploy their first Regulation Chatbot, we have developed the guided advice and required data input solution for GDPR Personal Data Breach Reporting. The starter kit solution is available from Df2020 and can be transferred for zero cost upon request. Partner organisations can then change the content rapidly and deploy through their Botframework or their client’s Botframework. Background In the UK, under the Data Protection Act 2018 or the EU GDPR there is a need to report specific types of data breaches to the Information Commissioners Office (ICO) within 72 hours. Each data breach needs to be risk assessed to ascertain whether it poses a risk to people, with consideration to likelihood or severity of people’s rights and freedoms. This means not all data breaches need to be reported to the ICO, but at a minimum it is important to have a transparent and traceable audit trail of the regulatory interpretation, associated decision-making and the rationality. Even when the risk is such that it must be reported to the ICO, the type of information required varies according to the regulatory set of rules. For example, a cyber breach requires more information to be submitted. The convention of having a documented procedure in place with supportive training does not provide the assurance of transparency and traceability of decision-making to safeguard the brand, balance sheet and the people involved. GDPR Benefits Using ICO’s publicly available guidelines, Df2020 has used Chatbot Author to automate the guidance for GDPR Personal Data Breach Reporting leading to these benefits:  Simplifying and streamlining decision-making  Masking complexity  Helping understand the regulation, if needed  Assessing regulatory risk  Requesting data input in context to the likelihood or severity of risk  Maintaining transparency and traceability  Generating data for processing and reporting Our Chatbot for Reporting a Personal Data Breach provides a partner with:  Customisable Intellectual Property  A new software-as-a-service  Option for a new subscription service  Extend with value added services such as: • Retain the compliance record for 7+ years using Azure SQL • Regulatory reporting using PowerApps • Business Intelligence using Power BI • Learnings at the edge using Azure Machine Learning  Beachhead for many other types of Regulatory Chatbots