Data processing systems for prioritizing data subject access requests for fulfillment and related methods
First Claim
1. A computer-implemented data processing method for prioritizing data subject access requests, the method comprising:
- receiving, by one or more processors, a data subject access request from a requestor comprising one or more request parameters;
applying, by the one or more processors, a prioritization level to the received data subject access request based on the one or more request parameters;
at least partially in response to receiving the data subject access request, obtaining, by the one or more processors, one or more pieces of metadata associated with a data subject of the data subject access request, wherein the one or more pieces of metadata comprise a request type associated with the data subject access request and the request type is selected from a group consisting of;
(1) a request for personal data that an organization is processing for the data subject;
(2) a request for personal data that an organization is processing for the data subject to be deleted;
(3) a request to update personal data that the organization is storing for the data subject;
(4) a request to opt out of having the organization use the data subject'"'"'s personal information in one or more particular ways; and
(5) a request to file a complaint;
determining, by the one or more processors, whether the one or more pieces of metadata relate to a priority of fulfilling the data subject access request, wherein fulfilling the data subject access request comprises identifying one or more pieces of personal data associated with the data subject by scanning one or more data inventories stored within a data system for the one or more pieces of personal data;
in response to determining that the obtained one or more pieces of metadata relate to the priority of fulfilling the data subject access request, analyzing, by the one or more processors, the one or more pieces of obtained metadata to determine whether the prioritization level of the data subject access request should be adjusted;
in response to determining that the prioritization level of the data subject access request should be adjusted based on the obtained one or more pieces of metadata, adjusting, by the one or more processors, the prioritization level of the data subject access request for fulfillment of the data subject access request, wherein adjusting the prioritization level of the data subject access request comprises modifying a completion date for fulfillment of the data subject access request based on the adjusted prioritization level of the data subject access request, and updating a prioritization indicator associated with the data subject access request to indicate that the prioritization level of the data subject access request has been adjusted; and
digitally storing, by the one or more processors, the adjusted prioritization level of the data subject access request in computer memory.
2 Assignments
0 Petitions
Accused Products
Abstract
In various embodiments, a data subject request fulfillment system may be adapted to prioritize the processing of data subject access requests based on metadata of the data subject access request. For example, the system may be adapted for: (1) in response to receiving a data subject access request, obtaining metadata regarding the data subject; (2) using the metadata to determine whether a priority of the data subject access request should be adjusted based on the obtained metadata; and (3) in response to determining that the priority of the data subject access request should be adjusted based on the obtained metadata, adjusting the priority of the data subject access request.
-
Citations
17 Claims
-
1. A computer-implemented data processing method for prioritizing data subject access requests, the method comprising:
-
receiving, by one or more processors, a data subject access request from a requestor comprising one or more request parameters; applying, by the one or more processors, a prioritization level to the received data subject access request based on the one or more request parameters; at least partially in response to receiving the data subject access request, obtaining, by the one or more processors, one or more pieces of metadata associated with a data subject of the data subject access request, wherein the one or more pieces of metadata comprise a request type associated with the data subject access request and the request type is selected from a group consisting of;
(1) a request for personal data that an organization is processing for the data subject;
(2) a request for personal data that an organization is processing for the data subject to be deleted;
(3) a request to update personal data that the organization is storing for the data subject;
(4) a request to opt out of having the organization use the data subject'"'"'s personal information in one or more particular ways; and
(5) a request to file a complaint;determining, by the one or more processors, whether the one or more pieces of metadata relate to a priority of fulfilling the data subject access request, wherein fulfilling the data subject access request comprises identifying one or more pieces of personal data associated with the data subject by scanning one or more data inventories stored within a data system for the one or more pieces of personal data; in response to determining that the obtained one or more pieces of metadata relate to the priority of fulfilling the data subject access request, analyzing, by the one or more processors, the one or more pieces of obtained metadata to determine whether the prioritization level of the data subject access request should be adjusted; in response to determining that the prioritization level of the data subject access request should be adjusted based on the obtained one or more pieces of metadata, adjusting, by the one or more processors, the prioritization level of the data subject access request for fulfillment of the data subject access request, wherein adjusting the prioritization level of the data subject access request comprises modifying a completion date for fulfillment of the data subject access request based on the adjusted prioritization level of the data subject access request, and updating a prioritization indicator associated with the data subject access request to indicate that the prioritization level of the data subject access request has been adjusted; and digitally storing, by the one or more processors, the adjusted prioritization level of the data subject access request in computer memory. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A computer-implemented data processing method for prioritizing data subject access requests, the method comprising:
-
receiving, by one or more processors, a data subject access request from a requestor; validating, by the one or more processors, an identity of the requestor by prompting the requestor to identify information associated with the requestor; at least partially in response to receiving the data subject access request, obtaining, by the one or more processors, one or more pieces of metadata associated with a data subject of the data subject access request, wherein the one or more pieces of metadata comprise a request type associated with the data subject access request and the request type is selected from a group consisting of;
(1) a request for personal data that an organization is processing for the data subject;
(2) a request for personal data that an organization is processing for the data subject to be deleted;
(3) a request to update personal data that the organization is storing for the data subject;
(4) a request to opt out of having the organization use the data subject'"'"'s personal information; and
(5) a request to file a complaint;analyzing, by the one or more processors, the one or more pieces of obtained metadata to determine a prioritization level of the data subject access request bar determining whether the one or more pieces of metadata relate to a priority of fulfilling the data subject access request, wherein fulfilling the data subject access request comprises identifying one or more pieces of personal data associated with the data subject by scanning one or more data inventories stored within a data system for the one or more pieces of personal data; determining, by the one or more processors, the prioritization level of the data subject access request based at least in part on the analyzed one or more pieces of obtained metadata; and digitally storing, by the one or more processors, the prioritization level of the data subject access request in computer memory. - View Dependent Claims (10, 11)
-
-
12. A computer-implemented data processing method for prioritizing data subject access requests, the method comprising:
-
receiving, by one or more processors, a data subject access request from a requestor; at least partially in response to receiving the data subject access request, obtaining, by the one or more processors, one or more pieces of metadata associated with a data subject of the data subject access request, wherein the metadata is selected from a group consisting of;
(1) a request type associated with the data subject access request, the request type being selected from a group consisting of;
(a) a request for personal data that an organization is processing for the data subject;
(b) a request for personal data that an organization is processing for the data subject to be deleted;
(c) a request to update personal data that the organization is storing for the data subject; and
(d) a request to opt out of having the organization use the data subject'"'"'s personal information; and
(e) a request to file a complaint, (2) a location from which the data subject access request is being made, (3) a status of the requestor issuing the data subject access request, (4) a time in which the data subject access request was made, and (5) current sensitivities to world events;analyzing, by the one or more processors, the one or more pieces of obtained metadata to determine a prioritization level of the data subject access request by determining whether the one or more pieces of metadata relate to a priority of fulfilling the data subject access request, wherein fulfilling the data subject access request comprises identifying one or more pieces of personal data associated with the data subject by scanning one or more data inventories stored within a data system for the one or more pieces of personal data; determining, by the one or more processors, the prioritization level of the data subject access request based at least in part on the analyzed one or more pieces of obtained metadata; and digitally storing, by the one or more processors, the prioritization level of the data subject access request in computer memory. - View Dependent Claims (13, 14, 15, 16, 17)
-
Specification