Consent receipt management systems and related methods

• US 10,572,686 B2
• Filed: 10/07/2019
• Issued: 02/25/2020
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Barday, Kabir A., Brannon, Jonathan Blake, Beaumont, Richard A., Mannix, John
• Primary Examiner(s): Jeon, Jae U
• Application Number:
  US16/594,670
• Publication Number:
  US 20200034570A1
• Time in Patent Office: 141 Days
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies

Abstract

In particular embodiments, a consent receipt management system is configured to track and analyze one or more attributes of a user interface via which data subjects are requested to provide consent (e.g., consent to process, collect, and/or store personal data) in order to determine which of the one or more attributes are more likely to result in a successful receipt of consent from a data subject. For example, the system may be configured to analyze one or more instances in which one or more data subjects provided or did not provide consent in order to identify particular attributes and/or factors that may increase a likelihood of a data subject providing consent.

Claims

1. A computer-implemented data processing method for optimizing consent for a transaction, the method comprising:

providing, by one or more processors, to a first plurality of data subjects, a first user interface having a first set of user interface attributes to each respective data subject of the first plurality of data subjects, the first user interface being a first user interface for initiating a transaction between an entity and each respective data subject of the first plurality of data subjects;

providing, by one or more processors, to a second plurality of data subjects, a second user interface having a second set of user interface attributes to each respective data subject of the second plurality of data subjects, the second user interface being a second user interface for initiating a transaction between the entity and each respective data subject of the second plurality of data subjects;

receiving, by one or more processors, one or more first requests to initiate the transaction from at least a first portion of the first plurality of data subjects;

receiving, by one or more processors, one or more second requests to initiate the transaction from at least a second portion of the second plurality of data subjects;

analyzing, by one or more processors, the one or more first requests and the one or more second requests to identify one or more common attributes among the first set of user interface attributes and the second set of user interface attributes, wherein the one or more common attributes comprise;

a time of day at which the first plurality of data subjects was provided the first user interface; and

a time of day at which the second plurality of data subjects was provided the second user interface;

analyzing, by one or more processors, the one or more common attributes of the first user interface and the second user interface to determine, based on the one or more first requests and the one or more second requests, at least one attribute that increases a likelihood that a particular data subject will submit a request to initiate the transaction;

storing an indication of the one or more common attributes in computer memory; and

generating a custom consent interface for initiating the transaction based at least in part on the and the at least one attribute, wherein generating the custom consent interface comprises determining a layout of the custom interface based at least in part on the at least one attribute.

2. The computer-implemented data processing method of claim 1, the method further comprising:

analyzing the first portion of the first plurality of data subjects to categorize the first portion of the first plurality of data subjects based on one or more first data subject attributes;

analyzing the second portion of the second plurality of data subjects to categorize the second portion of the second plurality of data subjects based on one or more second data subject attributes; and

comparing the one or more first data subject attributes and the one or more second data subject attributes to identify one or more shared data subject attributes;

generating the custom consent interface for initiating the transaction based at least further in part on the one or more shared data subject attributes.

3. The computer-implemented data processing method of claim 2, wherein the one or more shared data subject attributes are selected from the group consisting of:

age;

gender; and

occupation.

4. The computer-implemented data processing method of claim 1, wherein the transaction comprises processing, by the entity, one or more pieces of personal data associated with the first plurality of data subjects and the second plurality of data subjects.

5. The computer-implemented data processing method of claim 1, wherein the first user interface is the second user interface.

6. The computer-implemented data processing method of claim 1, the method further comprising:

tracking a number of the first plurality of data subjects that viewed the first user interface;

determining, based at least in part on the first portion of the first plurality of data subjects, an overall opt-in percentage for the first user interface; and

displaying the number of the first plurality of data subjects that viewed the first user interface and the overall opt-in percentage to a first user via a consent conversion interface.

7. The computer-implemented data processing method of claim 6, wherein:

the transaction comprises one or more transaction options; and

the method further comprises tracking a selection of each of the one or more transaction options and displaying the selection of each of the one or more transaction options as part of the consent conversion interface.

8. A computer-implemented data processing method for optimizing consent for a transaction, the method comprising:

providing, by one or more processors, to a plurality of data subjects, a user interface for initiating a transaction between an entity and each respective data subject of the plurality of data subjects;

at least partially in response to providing the user interface to the plurality of data subjects, receiving, by one or more processors, one or more requests to initiate the transaction from at least a first portion of the plurality of data subjects;

analyzing, by one or more processors, the one or more requests to identify one or more first factors associated with at least a first portion of the one or more requests, wherein the one or more first factors comprise a time of day at which each of the plurality of data subjects viewed the user interface;

analyzing, by one or more processors, the one or more first factors of the user interface to determine at least one factor of the one or more first factors that increase a likelihood that a particular data subject will submit a request to initiate the transaction;

storing an indication of the at least one factor in computer memory; and

generating a new user interface for initiating the transaction based at least in part on the at least one factor, wherein generating the new user interface comprises determining a layout of the new user interface based at least in part on the at least one factor.

9. The computer-implemented data processing method of claim 8, wherein:

the user interface comprises an electronic message; and

the one or more first factors comprise a length of the electronic message.

10. The computer-implemented data processing method of claim 9, wherein the one or more first factors comprise an opt-down option within the electronic message.

11. The computer-implemented data processing method of claim 8, wherein generating the new user interface comprises generating the new user interface to not include one or more of the one or more attributes.

12. The computer-implemented data processing method of claim 11, the method further comprising providing the new user interface to the plurality of data subjects that do not include the at least a portion of the plurality of data subjects.

13. A consent receipt analysis, processing, and custom interface generation system comprising;

one or more processors;

computer memory; and

a non-transitory computer-readable medium storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising;

providing, by one or more processors, to a first plurality of data subjects, a first user interface having a first set of user interface factors to each respective data subject of the first plurality of data subjects, the first user interface being a first user interface for initiating a first transaction between an entity and each respective data subject of the first plurality of data subjects;

providing, by one or more processors, to a second plurality of data subjects, a second user interface having a second set of user interface factors to each respective data subject of the second plurality of data subjects, the second user interface being a second user interface for initiating a second transaction between the entity and each respective data subject of the second plurality of data subjects;

receiving, by one or more processors, one or more first requests to initiate the first transaction from at least a first portion of the first plurality of data subjects;

receiving, by one or more processors, one or more second requests to initiate the second transaction from at least a second portion of the second plurality of data subjects;

analyzing, by one or more processors, the one or more first requests and the one or more second requests to identify one or more common factors among the first set of user interface factors and the second set of user interface factors, wherein the one or more common factors comprise;

a time of day at which the first user interface was provided to the first plurality of data subjects;

a time of day at which the second user interface was provided to the second plurality of data subjects;

analyzing, by one or more processors, the one or more common factors of the first user interface and the second user interface to determine, based on the one or more first requests and the one or more second requests, at least one factor that increases a likelihood that a particular data subject will submit a request to initiate the first transaction or the second transaction;

storing an indication of the at least one factor in computer memory; and

generating a custom consent interface for initiating a third transaction based at least in part on the at least one factor, wherein generating the custom consent interface comprises determining a layout of the custom consent interface based at least in part on the at least one factor.

14. The consent receipt analysis, processing, and custom interface generation system of claim 13, wherein the one or more common factors are selected from the group consisting of:

a type of the first transaction;

a type of the second transaction;

a number of first opt-down options available via the first user interface;

a number of second opt-down options available via the first user interface;

a time of day at which the first user interface was provided to the first plurality of data subjects;

a time of day at which the second user interface was provided to the second plurality of data subjects;

an age of the first plurality of data subjects;

an age of the second plurality of data subjects;

a gender of the first plurality of data subjects; and

a gender of the second plurality of data subjects.

15. The consent receipt analysis, processing, and custom interface generation system of claim 14, wherein the one or more common factors comprise a type of the first transaction and a type of the second transaction.

16. The consent receipt analysis, processing, and custom interface generation system of claim 13, wherein the non-transitory computer-readable medium further stores computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising providing the custom consent interface to a second portion of the first plurality of data subjects that does not include the first portion of the first plurality of data subjects.