Data processing systems for generating and populating a data inventory
First Claim
1. A computer-implemented data processing method for generating a first data asset assessment, the method comprising:
- accessing, by one or more processors, a data model of a plurality of data assets used in the collection or storage of personal data, the data model defining one or more electronic links between the plurality of data assets and storing a plurality of data inventories that define a plurality of inventory attributes for the plurality of data assets;
identifying, by one or more processors, a first data inventory from the plurality of data inventories, each of the plurality of data inventories being associated with a respective data asset, wherein the first data inventory comprises a plurality of fields that each define a respective inventory attribute of a first data asset associated with the first data inventory;
determining, by one or more processors, for the plurality of fields, one or more populated inventory attributes and one or more unpopulated inventory attributes;
retrieving, by one or more processors, a data asset questionnaire template;
analyzing, by one or more processors, the data asset questionnaire template to identify one or more questions that map to the one or more unpopulated inventory attributes;
generating, by one or more processors, a first data asset assessment based at least in part on the one or more questions that map to the one or more unpopulated inventory attributes;
receiving, by one or more processors, one or more responses to the one or more questions;
determining, by one or more processors, for each of the one or more unpopulated inventory attributes, one or more attribute values based at least in part on the one or more responses;
in response to determining the one or more attribute values, modifying, by one or more processors, the first data inventory to include the one or more attribute values for each of the one or more unpopulated inventory attributes by populating the plurality of fields;
storing, by one or more processors, the modified first data inventory in computer memory;
assigning a relative risk rating to each of the one or more responses;
calculating a relative risk level for the first data asset based at least in part on the relative risk rating and the one or more responses; and
modifying the first data inventory to include the relative risk rating.
2 Assignments
0 Petitions
Accused Products
Abstract
In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). For example, a first data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc.
-
Citations
17 Claims
-
1. A computer-implemented data processing method for generating a first data asset assessment, the method comprising:
-
accessing, by one or more processors, a data model of a plurality of data assets used in the collection or storage of personal data, the data model defining one or more electronic links between the plurality of data assets and storing a plurality of data inventories that define a plurality of inventory attributes for the plurality of data assets; identifying, by one or more processors, a first data inventory from the plurality of data inventories, each of the plurality of data inventories being associated with a respective data asset, wherein the first data inventory comprises a plurality of fields that each define a respective inventory attribute of a first data asset associated with the first data inventory; determining, by one or more processors, for the plurality of fields, one or more populated inventory attributes and one or more unpopulated inventory attributes; retrieving, by one or more processors, a data asset questionnaire template; analyzing, by one or more processors, the data asset questionnaire template to identify one or more questions that map to the one or more unpopulated inventory attributes; generating, by one or more processors, a first data asset assessment based at least in part on the one or more questions that map to the one or more unpopulated inventory attributes; receiving, by one or more processors, one or more responses to the one or more questions; determining, by one or more processors, for each of the one or more unpopulated inventory attributes, one or more attribute values based at least in part on the one or more responses; in response to determining the one or more attribute values, modifying, by one or more processors, the first data inventory to include the one or more attribute values for each of the one or more unpopulated inventory attributes by populating the plurality of fields; storing, by one or more processors, the modified first data inventory in computer memory; assigning a relative risk rating to each of the one or more responses; calculating a relative risk level for the first data asset based at least in part on the relative risk rating and the one or more responses; and modifying the first data inventory to include the relative risk rating. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A computer-implemented data processing method for generating a processing activity template for creation of a processing activity assessment for feeding a plurality of activity attribute values into a processing activity inventory for a particular processing activity, the method comprising:
-
identifying, by one or more processors, for the particular processing activity, a plurality of processing activity attribute values; electronically linking, by one or more processors, each respective processing activity attribute value of the plurality of processing activity attribute values to each of; an associated respective question of a plurality of questions in the processing activity template; and an associated respective field of a plurality of fields in the processing activity inventory; storing, by one or more processors, an indication of the electronic linking in computer memory; creating, by one or more processors, the processing activity assessment based at least in part on the processing activity template, the processing activity assessment comprising the plurality of questions; receiving, by one or more processors, from a user, one or more responses to the processing activity assessment comprising a respective response to each of the plurality of questions; filling, by one or more processors, the plurality of processing activity attribute values based at least in part on the respective response to each of the plurality of questions, the associated respective question, and the associated respective field; assigning a respective relative risk rating to each of the one or more responses; calculating a relative risk level for the particular processing activity based at least in part on each respective relative risk rating and the one or more responses; modifying the processing activity inventory to include each respective relative risk rating; and storing, by one or more processors, the processing activity inventory along with the filled plurality of processing activity attribute values in computer memory. - View Dependent Claims (9, 10, 11, 12, 13, 14, 15, 16, 17)
-
Specification