×

Data processing systems for generating and populating a data inventory for processing data access requests

  • US 10,181,051 B2
  • Filed: 06/01/2018
  • Issued: 01/15/2019
  • Est. Priority Date: 06/10/2016
  • Status: Active Grant
First Claim
Patent Images

1. A computer-implemented data processing method for identifying one or more pieces of personal data associated with a data subject within a data system in order to fulfill a data subject access request, the method comprising:

  • receiving, by one or more processors, from a data subject, a data subject access request;

    processing, by the one or more processors, the data subject access request by identifying the one or more pieces of personal data associated with the data subject, wherein identifying the one or more pieces of personal data associated with the data subject comprises scanning one or more data inventories stored within the data system for the one or more pieces of personal data, and wherein scanning the one or more data inventories stored within the data system for the one or more pieces of personal data comprises;

    accessing, via one or more computer networks, the one or more data inventories,generating a catalog of one or more pieces of personal information associated with the data subject based at least in part on the data subject access request,storing the catalog in computer memory,scanning the one or more data inventories based at least in part on the generated catalog to identify one or more attributes of data associated with the data subject by searching one or more data fields in the one or more data inventories for the one or more pieces of personal information,analyzing and correlating the one or more attributes and metadata for the scanned one or more data inventories,using one or more machine learning techniques to categorize one or more data elements from the generated catalog,analyzing a flow of the data elements among the one or more data inventories,categorizing the one or more data elements based on a confidence score,receiving input from one or more users confirming or denying a categorization of the one or more data elements, andin response to receiving the input, modifying the confidence score;

    in response to identifying the one or more pieces of personal data, taking one or more actions selected from the group consisting of;

    deleting the one or more pieces of personal data from the data system,modifying at least one of the one or more pieces of personal data and storing the modified at least one of the one or more pieces of personal data in the data system, andgenerating a report comprising the one or more pieces of personal data and providing the report to the data subject.

View all claims
  • 2 Assignments
Timeline View
Assignment View
    ×
    ×