Consent receipt management systems and related methods

• US 10,437,412 B2
• Filed: 02/17/2019
• Issued: 10/08/2019
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Barday, Kabir A., Brannon, Jonathan Blake, Beaumont, Richard A., Mannix, John
• Primary Examiner(s): Jeon, Jae U
• Application Number:
  US16/278,123
• Publication Number:
  US 20190179490A1
• Time in Patent Office: 233 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range

Abstract

In particular embodiments, a consent receipt management system is configured to track and analyze one or more attributes of a user interface via which data subjects are requested to provide consent (e.g., consent to process, collect, and/or store personal data) in order to determine which of the one or more attributes are more likely to result in a successful receipt of consent from a data subject. For example, the system may be configured to analyze one or more instances in which one or more data subjects provided or did not provide consent in order to identify particular attributes and/or factors that may increase a likelihood of a data subject providing consent.

Claims

1. A computer-implemented data processing method for optimizing consent for a transaction, the method comprising:

providing, by one or more processors, to a plurality of data subjects, a user interface for initiating a transaction between an entity and each respective data subject of the plurality of data subjects, wherein the transaction comprises processing, by the entity, one or more pieces of personal data associated with the at least a portion of the plurality of data subjects;

receiving, by one or more processors, one or more requests to initiate the transaction from at least a portion of the plurality of data subjects;

analyzing, by one or more processors, the one or more requests to identify one or more attributes of the user interface;

analyzing, by one or more processors, the one or more attributes of the user interface to determine at least one attribute of the one or more attributes that increase a likelihood that a particular data subject will submit a request to initiate the transaction;

analyzing the plurality of data subjects to categorize the plurality of data subjects based on one or more data subject attributes;

storing an indication of the at least one attribute in computer memory;

generating a custom interface for initiating the transaction based at least in part on the one or more data subject attributes and the at least one attribute;

receiving, via the custom interface, a request from a data subject to initiate the transaction;

in response to receiving the request, optionally transmitting a consent receipt to the data subject, the consent receipt comprising at least a unique subject identifier and a unique consent receipt key;

identifying one or more triggering events related to the transaction; and

automatically causing the unique consent receipt key to expire in response to an occurrence of the one or more triggering events.

2. The computer-implemented data processing method of claim 1, wherein the one or more requests to initiate the transaction comprise a consent by the at least a portion of the plurality of data subjects to the processing of the one or more pieces of personal data.

3. The computer-implemented data processing method of claim 2, wherein the one or more attributes comprise a time of day at which each of the plurality of data subjects viewed the user interface.

4. The computer-implemented data processing method of claim 2, wherein:

the user interface comprises an electronic message; and

the one or more attributes comprise length of the electronic message.

5. The computer-implemented data processing method of claim 4, wherein the one or more attributes comprise an opt-down option within the electronic message.

6. The computer-implemented data processing method of claim 2, the method further comprising generating a new user interface for initiating the transaction based at least in part on the at least one attribute.

7. The computer-implemented data processing method of claim 6, wherein generating the new user interface comprises generating the new user interface to not include one or more of the one or more attributes.

8. The computer-implemented data processing method of claim 7, the method further comprising providing the new user interface to the plurality of data subjects that do not include the at least a portion of the plurality of data subjects.

9. A computer-implemented data processing method for optimizing consent for a transaction, the method comprising:

providing, by one or more processors, to a plurality of data subjects, a user interface for initiating a transaction between an entity and each respective data subject of the plurality of data subjects;

receiving, by one or more processors, one or more requests to initiate the transaction from at least a portion of the plurality of data subjects;

analyzing, by one or more processors, the one or more requests to identify one or more attributes of the user interface;

analyzing, by one or more processors, the one or more attributes of the user interface to determine at least one attribute of the one or more attributes that increase a likelihood that a particular data subject will submit a request to initiate the transaction;

analyzing the plurality of data subjects to categorize the plurality of data subjects based on one or more data subject attributes;

storing an indication of the at least one attribute in computer memory;

generating a custom interface for initiating the transaction based at least in part on the one or more data subject attributes and the at least one attribute;

receiving, via the custom interface, a request from a data subject to initiate the transaction;

in response to receiving the request, optionally transmitting a consent receipt to the data subject, the consent receipt comprising at least a unique subject identifier and a unique consent receipt key;

identifying one or more triggering events related to the transaction; and

automatically causing the unique consent receipt key to expire in response to identifying the one or more triggering events.

10. The computer-implemented data processing method of claim 9, wherein the one or more data subject attributes are selected from the group consisting of:

age;

gender; and

occupation.

11. The computer-implemented data processing method of claim 9, wherein generating the custom interface comprises determining a layout of the custom interface based at least in part on the at least one attribute.

12. The computer-implemented data processing method of claim 9, the method further comprising providing a consent conversion interface comprising data associated with the at least a portion of the plurality of data subjects.

13. The computer-implemented data processing method of claim 12, wherein the transaction comprises processing, by the entity, one or more pieces of personal data associated with the at least a portion of the plurality of data subjects.

14. The computer-implemented data processing method of claim 13, wherein the one or more requests to initiate the transaction comprise a consent by the at least a portion of the plurality of data subjects to the processing of the one or more pieces of personal data.

15. The computer-implemented data processing method of claim 14, the method further comprising:

tracking a number of data subjects that viewed the user interface;

determining an overall opt-in percentage for the user interface; and

displaying the number of data subjects that viewed the user interface and the overall opt-in percentage as part of the consent conversion interface.

16. The computer-implemented data processing method of claim 15, wherein:

the transaction comprises one or more transaction options; and

the method further comprises tracking a selection of each of the one or more transaction options and displaying the selection of each of the one or more transaction options as part of the consent conversion interface.

17. The computer-implemented data processing method of claim 9, wherein the one or more attributes comprise a time of day at which each of the plurality of data subjects viewed the user interface.

18. The computer-implemented data processing method of claim 9, wherein:

the user interface comprises an electronic message; and

the one or more attributes comprise length of the electronic message.

19. The computer-implemented data processing method of claim 18, wherein the one or more attributes comprise an opt-down option within the electronic message.