The present disclosure relates to a method for regulatory compliance and, more specifically, to guiding the process of populating regulatory compliance forms while reducing duplicative efforts. Where a compliance report includes intellectual property information, the present disclosure further guides the regulatory compliance process to ensure that the intellectual property information remains confidential and is made only selectively available to the regulators that require the information for approving a product or service. The present disclosure is anticipated for use in manufacturing value chains, but is amenable to other public and private sectors as well.
Agencies of multiple levels regulate the products and services that enter commerce. The regulations help ensure that the products or services (collectively referred to hereinafter as “product”) are safe and effective. The process for reporting product information and ensuring that the products comply with related requirements is referred to herein as “regulatory compliance”. The regulations can also change over time—i.e., they can get stricter or more relaxed. At the most basic level, regulatory compliance is an exercise of filling out forms. However, it gets more complex when there are a number of participants each reporting in a value chain. For any end-product, there can be multiple participants in the supply chain that cooperate to create the product. For example, the manufacturers are regulated on the materials used to produce the various sub-parts forming the product, while the printer (or supplier of the ink) is separately regulated on the ink involved in labeling the product. Each participant is regulated in its own capacity, but the final distributor cannot introduce the product in commerce until each participant in the supply chain has complied with its regulations. Furthermore, any one vendor may be required to report to multiple agencies. These relationships between vendors cooperating on a product, and the reporting structure among parties forming the relationships, is referred to herein as “supply chain management”.
To further complicate matters, the conventional process of simply filling out forms has not been sufficient to (for example) keep regulated chemicals from entering the environment. In January 2017, the EPA promulgated significant new use regulations under the Toxic Substances Control Act. Similar changes or new regulations are being introduced worldwide. The new rules have turned the conventional method of filling out forms into an enormous and cumbersome data analytics task.
The process gets more complicated when a participant up the supply chain reports to multiple agencies and to the participants farther down the supply chain. Regulatory compliance reporting exposes intellectual property and private data. Under certain conditions, a company's intellectual property or proprietary information may be exposed to other participants down the value chain. For example, proprietary information of the participant can be made viewable to competitors when other vendors down the chain can view the compliance reports. Particularly, this information can include trade secrets on ingredients used in forming a chemical or the steps that are performed in an operation used to produce an ingredient, among others.
An additional side effect caused by the new regulations is that regulators are not prepared to make use of, or handle, the amount of data that is being submitted. In other words, the regulators are or will be overwhelmed by the volume of data that it will receive as a result of the new regulations, which complicates the process for approval on the regulator's end.
The complexity of the conventional process competes with the need for a simpler approach that also allows for proprietary information to be reported to the regulatory agency in confidence. There is a need for a more adjudicated process for each end-user in the private and public sectors.
One embodiment of the disclosure is directed to a method for guiding the process of regulatory compliance to radically simplify the process of populating the forms for end-users in the private sector. The method includes accessing a repository including a plurality of regulatory forms each corresponding to a participating agency, wherein each of the plurality of forms includes a plurality of data fields. At a server computer in communication with the repository, the method includes processing each form in the repository to generate a superset of all data fields required by all of the agencies. The method includes receiving from a user interface a new or renewing product or service submission. From the product/service identified in the submission, the method includes determining compliance requirements that the product or service must satisfy before entering commerce. The method includes determining at least one form corresponding to the requirements. The method includes acquiring from the repository the at least one form. The method includes populating user information in the data fields of the at least one form to generate at least one regulatory compliance report. The method includes transmitting the at least one regulatory compliance report to a corresponding agency computing device.
Another embodiment of the disclosure is directed to a system for populating regulatory forms. The system includes a repository comprising a plurality of regulatory forms each corresponding to a participating agency. Each of the plurality of forms includes a plurality of data fields. The system includes a server computer in communication with the repository. The server computer includes a memory storing instructions and a processor programmed to execute the instructions. The processor is operative to process each form in the repository to generate a superset of all data fields required by all of the agencies. The processor is further operative to receive from a user interface a new or renewing product or service submission. From the product or service identified in the submission, the processor determines compliance requirements that the product or service must satisfy before entering commerce. The processor is operative to determine at least one form corresponding to the requirements; acquire from the repository the at least one form; and populate user information in the data fields of the at least one form to generate at least one regulatory compliance report. The processor is operative to transmit the at least one regulatory compliance report to a corresponding agency computing device.
Another element of the disclosure is a system and method of delivering appropriate data to appropriate regulators for evaluation. Different regulators require different subsets of data from the various value chain participants. The current disclosure delivers data to a particular regulatory agency, and more specifically transmits only the data required from a particular value chain participant to the agency. By this, the regulator also benefits from a reduced volume of information and is not required to process information that it does not need.
Another element of the disclosure is a system and method to enable only authorized private and public sector participants to see any particular piece of data submitted by any of the private sector participants. In other words, the various parties interacting with the present system have access to only the information that they are authorized to view or need to perform their tasks or obligations.
In general, embodiments of the disclosure provide a method and system for regulatory compliance and particularly for guiding the process of populating and reporting a compliance record form. In general, embodiments of the disclosure aggregate a set of report forms in a repository. Each report form may be associated with one or more regulatory agencies. After aggregating the forms, a request for the compliance data of a product that is going to be introduced into commerce is received by the system. In other embodiments, the request can be received for updating the reports for products and/or services that are already in commerce, as such products may require updating at regulated intervals. The request may include a location of the product or service, which is matched to the relevant agencies. The agencies are then matched to the relevant form(s) in the repository. The system then populates a regulatory compliance report for a source material or operation used in producing the product or service. On a vendor-by-vendor basis, the system selectively redacts proprietary information from the compliance report, and transmits the partially redacted compliance report to the vendor cooperating in the introduction of the new product, farther down the supply chain.
Through an interface in communication with a vendor computing device 106, the RCS system is in electronic communication with one or more value chain partners. As used herein, a value chain partner can mean a supporting manufacturer (e.g., 16, 18); an end-product manufacturer 20; a user 22 of the product or service; and a disposer or waste manager 24 of the product, among other parties in the supply chain. The value chain partners (hereinafter collectively referred to as “vendors”) can submit the information that is required for populating the data fields in the forms. Each vendor can receive the completed reports—or redacted copies of the completed reports—of other vendors up or down the supply chain. The disclosure anticipates the private sector participants—meeting emerging regulatory requirements—as users of the system
With continued reference to
In one embodiment, the data fields are extracted from all forms to generate a superset of data fields stored in a repository 124 in communication with the system. In one embodiment, agencies can supply the forms to the RCS system 100 for processing. Hardware components 122, 116, 120, 122 of the RCS system 100 communicate via a data/control bus 126.
The illustrated instructions 114 include a dataset generation module 130, a form identification module 132; a form population module 134; and an output module 136.
The dataset generation module 130 generates a superset of all data fields included in the acquired forms. Further, the module 130 extracts a request for information corresponding to each data field from the plurality of regulatory forms; removes duplicate requests in the superset of data fields. While processing a request for a specific form, in one embodiment the dataset generation module can generate a subset of data fields required by all the regulatory agencies that regulate a selected product or service.
The form identification module 132 determines compliance requirements that the product or service must satisfy before entering commerce. Module 132 also identifies at least one form corresponding to the requirements. The form population module 132 populates user information in the data fields of the at least one form to generate a regulatory compliance report. The module 132 also selectively redacts information in the regulatory compliance report on a vendor-by-vendor basis.
The output module 134 provides the generated report to a user device.
The modules are software applications or a set of software applications executing on one or more hardware processors. The software application may be a web application in a server of a data center and/or cloud computing application in a network distributed system. Alternatively, the modules may be a software application residing on a user computing device. The computer system 100 may include one or more computing devices, such as a PC, such as a desktop, a laptop, palmtop computer, portable digital assistant (PDA), server computer, cellular telephone, tablet computer, pager, a scanner, and combinations thereof, or other computing device capable of executing the instructions for performing the exemplary method. The components of the system may be located on the same device or on separate devices connected to a network (e.g., the Internet, with wired and/or wireless segments.
The memory 112 may represent any type of non-transitory computer readable medium such as random access memory (RAM), read only memory (ROM), magnetic disk or tape, optical disk, flash memory, or holographic memory. In one embodiment, the memory 112 comprises a combination of a random access memory and read only memory. In some embodiments, the processor 116 and memory 112 may be combined in a single chip. Memory 112 stores instructions for performing the exemplary method as well as the processed data.
The network interface 120, 122 allows the computer to communicate with other devices via a computer network, such as a local area network (LAN) or wide area network (WAN), or the internet, and may comprise a modulator/demodulator (MODEM), a router, a cable, and/or Ethernet port.
The digital processor device 116 can be variously embodied, such as by a single-core processor, a dual-core processor (or more generally by a multiple-core processor), a digital processor and cooperating math coprocessor, a digital controller, or the like. The digital processor 116, in addition to executing instructions 114 may also control the operation of the computer 118.
The term “software,” as used herein, is intended to encompass any collection or set of instructions executable by a computer or other digital system so as to configure the computer or other digital system to perform the task that is the intent of the software. The term “software” as used herein is intended to encompass such instructions stored in storage medium such as RAM, a hard disk, optical disk, or so forth, and is also intended to encompass so-called “firmware” that is software stored on a ROM or so forth. Such software may be organized in various ways, and may include software components organized as libraries, Internet-based programs stored on a remote server or so forth, source code, interpretive code, object code, directly executable code, and so forth. It is contemplated that the software may invoke system-level code or calls to other software residing on a server or other location to perform certain functions.
The repository 124 is a database or a storage application residing on one or more servers. The repository 124 can be a distributed database management system (or a component thereof), a clustered database, a standalone flat file, and/or any storage software residing on one or more physical storage devices. Examples of a storage device may include, but are not limited to, a hard disk drive, a tape drive, a redundant array of independent disks (RAID), and/or a solid state drive or memory drive. Any type of database or storage application can be used, in accordance with the various embodiments of the disclosure. The repository 124 is in communication with the RCS system and can also store a table associating regulatory forms with the corresponding agencies, products with the agencies that regulate them, or a combination of the above.
A method 300 for reporting regulatory forms is shown in
In a further preprocessing operation, the system rationalizes the forms so that there are no repeated data fields. Each regulatory agency has different compliance requirements. For this reason, a vendor may be required to report to regional and national agencies. For the vendor that is required to complete multiple reports using the conventional process, there is some overlap to the questions that are asked across forms. For example, the name and address information, or identification information, is repeated across forms. At S306, the dataset generation module 130 extracts a request for information corresponding to each data field from all forms and generates a superset of data fields in the repository. The module 130 further filters the superset to discard any duplicative requests so that there is only one copy of each data field in the repository.
A copy of each form is stored in the repository. At S308, the RCS system accesses the repository comprising a plurality of regulatory forms each corresponding to a participating agency, wherein each of the plurality of forms comprises a plurality of data fields. At S310, the RCS system receives a request from a user interface in communication with the system. The request, or notice, involves a new product or an existing product, which needs updated information.
The request identifies the product and also includes the location of the product. Returning to
In one or more embodiments, the system includes functionality to match the product or location information to agency and/or regulations in the repository. Module 132 may evaluate one or more matching criteria using the product information from the vendor as input to the matching criteria. Using the product information, module 132 accesses a table corresponding to the regulated products and the agencies that regulate the products at S314. In response to the module 132 matching the product (associated with the submission) with a regulated product listed in the table, module 132 determines the compliance requirements that the product must satisfy for each regulatory agency before entering commerce at S316. The disclosure is not limited to any one approach for determining the compliance requirements.
In one embodiment, module 132 can determine the compliance requirements by identifying at least one compliance form that needs to be completed for the product marketing. This determination can be made on a vendor-by-vendor basis, whereby the vendor can be associated with a component, source material, or operation of the end-product. At S318, module 134 acquires the data fields from the repository after identifying the relevant compliance requirements. This operation involves acquiring from the superset of all data fields the corresponding requests for information, and removing any data fields that are not required by the target agencies.
Continuing at
The first time that a vendor or manufacturer submits product information as a form of input is when it completes a development of the product. This information can be updated at certain junctures. For example, in one embodiment, the system includes functionality to add a new vendor to the product record in the repository. The information can further be updated when a new regulation is introduced for enforcement; when there is a change in the vendor providing a sub-component, or when a new certification or classification is required by the product distributors or consumers. Regardless, the information is received from the vendor computing or user device.
The module 134 next extracts the information corresponding with each data field from the completed form at S326. In another embodiment, the form population module 134 acquires the information stored in the repository.
The system may further include functionality to aggregate the product and/or vendor information in the repository. In one embodiment, the system may create a product record that may link all vendors that cooperate to create the product.
Returning to
In one embodiment, the data fields that are stored in the repository can be classified into security and sharable levels. In response to the module 134 populating the data field with the corresponding information, the module can further redact the information from the final report, depending on the recipient of the report. In another embodiment, the vendor/manufacturer can set the level of confidentiality when it submits the information to the RCS system.
The RCS system discriminates between the recipients. Each vendor reports on its own product to the RCS system (see,
This scenario is illustrated in
The output module 138 may display the completed report, or a summary of the populated data fields corresponding to a completed report, in a user interface. The user interface may prompt a vendor to approve of a final submission of the report before transmitting the at least one regulatory compliance report to a corresponding agency computing device. At S332A, module 138 transmits the completed regulatory compliance report to the target agencies. In one embodiment, module 138 can automatically transmit the completed report to the target recipients, and further display a confirmation at the end-user computing device indicating that the regulatory compliance report had been submitted to an appropriate agency for the source material or operation.
Embodiments are contemplated by which the system includes functionality to transmit a copy of the regulatory compliance report to computing devices owned respectively by one or more vendors. In such embodiments, the output module 136 is operative to transmit the completed report or a partially redacted compliance report to a user computing device associated with a vendor farther down a supply chain at S332B.
In another embodiment, the recipients (agencies, vendors, manufacturers, etc.) can access the completed reports in the RCS system. A copy of the report is maintained in the repository and can be selectively accessed by the agency.
Furthermore, at S334 the system includes functionality that allows the recipients of the report to send results and/or requests for additional information through the RCS system to the vendor.
The output module 136 is further operative to determine errors or incomplete data fields in the populated report. In response to one of an error and incomplete data field populated in the regulatory compliance report, module 136 transmits a notification to at least one of a vendor computing device and an end-user computing device. In this manner, the vendor can submit information to the RCS system to correct or complete the report, or the end-user can prompt the vendor to do the same. In a similar manner, in response to no regulatory compliance report being generated for the source material or operation used in producing the product or service, module 136 can transmit a notification to the at least one of the vendor computing device and the end-user/manufacturer computing device. The method returns to S322 to correct any errors in the report. The method ends at S336.
One aspect of the disclosure is that it allows a vendor to enter a product into a new region without repeating the cumbersome task of filling out forms from the beginning. Instead, the RCS system automatically populates the correct data for the forms required by the agencies having jurisdiction in the new region. The system only requests from the vendor any supplemental data that is absent in the previously completed reports, but is required by the new region.
It will be appreciated that variants of the above-disclosed and other features and functions, or alternatives thereof, may be combined into many other different systems or applications. Various presently unforeseen or unanticipated alternatives, modifications, variations or improvements therein may be subsequently made by those skilled in the art which are also intended to be encompassed by the following claims.