Data processing systems and methods for performing privacy assessments and monitoring of new versions of computer code for privacy compliance

• US 10,419,493 B2
• Filed: 12/14/2018
• Issued: 09/17/2019
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Barday, Kabir A.
• Primary Examiner(s): Goodchild, William J.
• Application Number:
  US16/220,899
• Publication Number:
  US 20190124119A1
• Time in Patent Office: 277 Days
• Field of Search: None
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

In various embodiments, a data map generation system is configured to: (1) enable a user to specify one or more criteria; (2) identify one or more data flows based at least in part on the one or more specified criteria; (3) generate a data map based at least in part on the identified one or more data flows; and (4) display the data map to any suitable individual (e.g., the user). In particular embodiments, the system is configured to display all data flows associated with a particular organization that are stored within the system. In other embodiments, the system is configured to display all data flows that are associated with a particular privacy campaign undertaken by the organization.

Claims

1. A computer-implemented data processing method for electronically analyzing computer code to generate a data map, the method comprising:

receiving, from a particular user, a request to generate a data map for one or more privacy-related attributes of a piece of computer code, the request comprising one or more criteria and a location of the computer code;

electronically obtaining the computer code based on the location provided by the particular user;

automatically electronically analyzing the computer code to determine the one or more privacy-related attributes of the computer code, each of the privacy-related attributes indicating one or more types of personal information that the computer code collects or accesses;

electronically generating a data map of the one or more privacy-related attributes based at least in part on the one or more criteria;

digitally storing the data map in computer memory; and

electronically displaying the data map to the particular user.

2. The computer-implemented data processing method of claim 1, wherein:

the one or more criteria comprises a criteria to generate the data map based at least in part on a particular privacy campaign for which the computer code collects or accesses the one or more types of personal information.

3. The computer-implemented data processing method of claim 2, wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location; and

generating a visual representation of the particular privacy campaign that includes the data.

4. The computer-implemented data processing method of claim 1, wherein:

the one or more criteria comprise a criteria to generate a data map based at least in part on a particular type of the one or more types of personal information.

5. The computer-implemented data processing method of claim 1, wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location;

identifying one or more pieces of the data that comprise the particular type of the one or more types of personal information; and

generating a visual representation of the particular type of the one or more types of personal information that includes the one or more pieces of the data that comprise the particular type of the one or more types of personal information.

6. The computer-implemented data processing method of claim 1, wherein:

the one or more criteria comprises a criteria to generate a data map based at least in part on a plurality privacy campaigns.

7. The computer-implemented data processing method of claim 1, the method further comprising:

receiving an indication that the computer code has been modified;

in response to receiving the indication, analyzing the computer code to identify one or more changes in the one or more privacy related attributes of the computer code; and

modifying the data map based at least in part on the identified one or more changes.

8. The computer-implemented data processing method of claim 7, the method further comprising:

substantially continuously modifying the data map based at least in part on one or more additional changes identified in response to receiving one or more additional indications that the computer code has been modified.

9. The computer-implemented data processing method of claim 1, wherein the one or more privacy-related attributes further identify a storage location of one or more pieces of personal information of the one or more types of personal information that the computer code collects or accesses.

10. The computer-implemented data processing method of claim 9, wherein the one or more privacy-related attributes further identify one or more access permissions of the one or more pieces of personal information.

11. The computer-implemented data processing method of claim 1, wherein the particular user comprises a privacy officer.

12. A computer-implemented data processing method for electronically analyzing computer code to generate a data map, the method comprising:

receiving, from a particular user, a request to generate a data map for one or more privacy-related attributes of a piece of computer code, the request comprising one or more criteria, wherein the one or more criteria comprise a criteria to generate the data map based at least in part on a particular privacy campaign for which the computer code collects or accesses the one or more types of personal information;

receiving a location of the computer code;

electronically obtaining the computer code based on the location of the computer code;

automatically electronically analyzing the computer code to determine the one or more privacy-related attributes of the computer code, each of the privacy-related attributes indicating one or more types of personal information that the computer code collects or accesses;

electronically generating a data map of the one or more privacy-related attributes based at least in part on the one or more criteria;

digitally storing the data map in computer memory; and

electronically displaying the data map to the particular user.

13. The computer-implemented data processing method of claim 12, wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location; and

generating a visual representation of the particular privacy campaign that includes the data.

14. The computer-implemented data processing method of claim 12, wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location;

identifying one or more pieces of the data that comprise the particular type of the one or more types of personal information; and

generating a visual representation of the particular type of the one or more types of personal information that includes the one or more pieces of the data that comprise the particular type of the one or more types of personal information.

15. The computer-implemented data processing method of claim 12, the method further comprising:

receiving an indication that the computer code has been modified;

in response to receiving the indication, analyzing the computer code to identify one or more changes in the one or more privacy related attributes of the computer code; and

modifying the data map based at least in part on the identified one or more changes.

16. The computer-implemented data processing method of claim 15, the method further comprising:

substantially continuously modifying the data map based at least in part on one or more additional changes identified in response to receiving one or more additional indications that the computer code has been modified.

17. A computer-implemented data processing method for electronically analyzing computer code to generate a data map, the method comprising:

generating a data map for one or more privacy-related attributes of a piece of computer code based on one or more criteria by;

receiving a location of the computer code;

electronically obtaining the computer code based on the location of the computer code;

automatically electronically analyzing the computer code to determine the one or more privacy-related attributes of the computer code, each of the privacy-related attributes indicating one or more types of personal information that the computer code collects or accesses; and

electronically generating the data map of the one or more privacy-related attributes based at least in part on the one or more criteria;

digitally storing the data map in computer memory; and

electronically displaying the data map to at least one particular user.

18. The computer-implemented data processing method of claim 17, wherein the one or more privacy-related attributes further identify a storage location of one or more pieces of personal information of the one or more types of personal information that the computer code collects or accesses.

19. The computer-implemented data processing method of claim 18, wherein the one or more privacy-related attributes further identify one or more access permissions of the one or more pieces of personal information.