Data processing systems and methods for performing privacy assessments and monitoring of new versions of computer code for privacy compliance

• US 10,498,770 B2
• Filed: 07/23/2018
• Issued: 12/03/2019
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Barday, Kabir A.
• Primary Examiner(s): Goodchild, William J.
• Application Number:
  US16/042,673
• Publication Number:
  US 20180352001A1
• Time in Patent Office: 498 Days
• Field of Search: None
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

In various embodiments, a data map generation system is configured to: (1) enable a user to specify one or more criteria; (2) identify one or more data flows based at least in part on the one or more specified criteria; (3) generate a data map based at least in part on the identified one or more data flows; and (4) display the data map to any suitable individual (e.g., the user). In particular embodiments, the system is configured to display all data flows associated with a particular organization that are stored within the system. In other embodiments, the system is configured to display all data flows that are associated with a particular privacy campaign undertaken by the organization.

Claims

1. A computer-implemented data processing method for generating and displaying a data map of data related to one or more privacy campaigns, the method comprising:

receiving a command to create a plurality of electronic records for each of one or more privacy campaigns;

creating a plurality of electronic records comprising a respective electronic record for each of the one or more privacy campaigns and digitally storing the plurality of records;

presenting on one or more graphical user interfaces a plurality of prompts for the input of campaign data related to each of the one or more privacy campaigns;

electronically receiving campaign data input by one or more users, wherein the campaign data relates to;

one or more types of personal data related to one or more of the one or more privacy campaigns;

a subject from which the personal data was collected; and

one or more parameters under which the personal data will be retained;

processing the campaign data by electronically associating the campaign data with each associated respective record for the one or more of the one or more privacy campaigns;

digitally storing the campaign data associated with each associated respective record for the one or more of the one or more privacy campaigns;

receiving a request to generate a data map, the request comprising one or more criteria;

identifying, based at least in part on the one or more criteria, one or more of the plurality of electronic records;

generating a data map based at least in part on the one or more identified plurality of electronic records; and

displaying the data map to a user.

2. The computer-implemented data processing method of claim 1, wherein the user comprises a privacy officer.

3. The computer-implemented data processing method of claim 1, wherein the one or more criteria are selected from the group consisting of:

a first criteria to generate a data map based at least in part on a particular privacy campaign of the one or more privacy campaigns;

a second criteria to generate a data map based at least in part on a particular piece of the campaign data; and

a third criteria to generate a data map based at least in part on each of the one or more privacy campaigns.

4. The computer-implemented data processing method of claim 3, wherein:

the one or more criteria comprise the first criteria; and

identifying the one or more of the plurality of electronic records comprises identifying each particular electronic record that stores the campaign data for the particular privacy campaign.

5. The computer-implemented data processing method of claim 4, wherein generating the data map comprises:

retrieving the campaign data from each of the identified plurality of electronic records; and

generating a visual representation of the particular privacy campaign that includes the campaign data from each of the identified plurality of electronic records.

6. The computer-implemented data processing method of claim 3, wherein:

the one or more criteria comprise the second criteria;

identifying the one or more of the plurality of electronic records comprises identifying each particular electronic record that stores the particular piece of the campaign data.

7. The computer-implemented data processing method of claim 6, wherein generating the data map comprises:

retrieving one or more pieces of campaign data from each of the identified plurality of electronic records; and

generating a visual representation of the one or more pieces of campaign data from the one or more identified plurality of electronic records.

8. The computer-implemented data processing method of claim 6, wherein the visual representation of the one or more pieces of campaign data from the one or more identified plurality of electronic records comprises:

a source of the one or more pieces of campaign data;

a storage destination for the one or more pieces of campaign data; and

one or more entities that have accesses to the one or more pieces of campaign data.

9. The computer-implemented data processing method of claim 3, wherein:

the one or more criteria comprise the third criteria; and

generating the data map comprises;

identifying the one or more of the plurality of electronic records that comprises campaign data for the one or more privacy campaigns;

retrieving the campaign data from each of the one or more of the plurality of electronic records; and

generating a visual representation of the campaign data from each of the one or more of the plurality of electronic records.

10. The computer-implemented data processing method of claim 1, wherein the method further comprises substantially automatically generating and continuously updating the data map in response to receiving the campaign data.

11. A computer-implemented data processing method for generating and displaying a data map of data related to one or more privacy campaigns, the method comprising:

creating a plurality of electronic records for each of one or more privacy campaigns and digitally storing the plurality of electronic records, wherein the plurality of electronic records comprise a respective electronic record for each of the one or more privacy campaigns;

presenting on one or more graphical user interfaces a plurality of prompts for the input of campaign data related to each of the one or more privacy campaigns;

electronically receiving campaign data input by one or more users, wherein the campaign data relates to;

one or more types of sensitive information related to one or more of the one or more privacy campaign;

the storage of the sensitive information; and

access to the sensitive information;

processing the campaign data by electronically associating the campaign data with each associated respective electronic record for the one or more of the one or more privacy campaigns;

digitally storing the campaign data associated with each associated respective record for the one or more of the one or more privacy campaigns;

receiving a request to generate a data map, the request comprising one or more criteria that are selected from the group consisting of;

a first criteria to generate a data map based at least in part on a particular privacy campaign of the one or more privacy campaigns;

a second criteria to generate a data map based at least in part on a particular piece of the campaign data; and

a third criteria to generate a data map based at least in part on each of the one or more privacy campaigns;

identifying, based at least in part on the one or more criteria, one or more of the plurality of electronic records;

generating a data map based at least in part on the one or more identified plurality of electronic records; and

displaying the data map to a user.

12. The computer-implemented data processing method of claim 11, wherein the user comprises a privacy officer.

13. The computer-implemented data processing method of claim 11, wherein:

the one or more criteria comprise the first criteria; and

identifying the one or more of the plurality of electronic records comprises identifying each particular electronic record that stores the campaign data for the particular privacy campaign.

14. The computer-implemented data processing method of claim 13, wherein generating the data map comprises:

retrieving the campaign data from each of the identified plurality of electronic records; and

generating a visual representation of the particular privacy campaign that includes the campaign data from each of the identified plurality of electronic records.

15. The computer-implemented data processing method of claim 11, wherein:

the one or more criteria comprise the second criteria;

identifying the one or more of the plurality of electronic records comprises identifying each particular electronic record that stores the particular piece of the campaign data.

16. The computer-implemented data processing method of claim 15, wherein generating the data map comprises:

retrieving one or more pieces of campaign data from each of the identified plurality of electronic records; and

generating a visual representation of the one or more pieces of campaign data from the one or more identified plurality of electronic records.

17. The computer-implemented data processing method of claim 15, wherein the visual representation of the one or more pieces of campaign data from the one or more identified plurality of electronic records comprises:

a source of the one or more pieces of campaign data;

a storage destination for the one or more pieces of campaign data; and

one or more entities that have accesses to the one or more pieces of campaign data.

18. The computer-implemented data processing method of claim 11, wherein:

the one or more criteria comprise the third criteria; and

generating the data map comprises;

identifying the one or more of the plurality of electronic records that comprises campaign data for the one or more privacy campaigns;

retrieving the campaign data from each of the one or more of the plurality of electronic records; and

generating a visual representation of the campaign data from each of the one or more of the plurality of electronic records.

19. A computer-implemented data processing method for generating and displaying a data map of data related to one or more privacy campaigns, the method comprising:

receiving a command to create a plurality of electronic records for each of one or more privacy campaigns;

creating a plurality of electronic records comprising a respective electronic record for each of the one or more privacy campaigns and digitally storing the plurality of records;

presenting on one or more graphical user interfaces a plurality of prompts for the input of campaign data related to each of the one or more privacy campaigns;

electronically receiving campaign data input by one or more users, wherein the campaign data is related to at least one selected from a group consisting of;

one or more types of personal data related to one or more of the one or more privacy campaigns;

a subject from which the personal data was collected;

one or more entities responsible for the one or more privacy campaigns

the storage of the personal data; and

access to the personal data;

processing the campaign data by electronically associating the campaign data with each associated respective record for the one or more of the one or more privacy campaigns;

digitally storing the campaign data associated with each associated respective record for the one or more of the one or more privacy campaigns;

receiving a request to generate a data map, the request comprising one or more criteria that is selected from the group consisting of;

a first criteria to generate a data map based at least in part on a particular privacy campaign of the one or more privacy campaigns;

a second criteria to generate a data map based at least in part on a particular piece of the campaign data; and

a third criteria to generate a data map based at least in part on each of the one or more privacy campaigns;

identifying, based at least in part on the one or more criteria, one or more of the plurality of electronic records;

generating a data map based at least in part on the one or more identified plurality of electronic records; and

displaying the data map to a user.

20. The computer-implemented data processing method of claim 19, wherein the method further comprises substantially automatically generating and continuously updating the data map in response to receiving the campaign data.