Data processing systems and communication systems and methods for the efficient generation of privacy risk assessments
First Claim
1. A computer-implemented data processing method for efficiently conducting privacy risk assessments for a plurality of privacy campaigns, the method comprising, for each of the plurality of privacy campaigns:
- presenting, by one or more processors, a threshold privacy assessment to a user that includes a first set of one or more questions for a first plurality of question/answer pairings that identify one or more privacy characteristics of a particular privacy campaign;
receiving, by one or more processors, respective answers for the first plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign;
determining, by one or more processors, a threshold privacy risk score for the particular privacy campaign that identifies a level of risk for one or more of the privacy characteristics indicated in the first plurality of question/answer pairings;
comparing, by one or more processors, the threshold privacy risk score to a threshold privacy risk value, the threshold privacy risk value indicating a pre-determined level of risk regarding the one or more privacy characteristics of the particular privacy campaign;
determining, by one or more processors, whether the threshold privacy risk score exceeds the threshold privacy risk value;
in response to determining that the threshold privacy risk score exceeds the threshold privacy risk value, performing, by one or more processors, an advanced privacy impact assessment that includes one or more steps in addition to steps performed during the threshold privacy assessment, wherein the one or more steps in addition to steps performed during the threshold privacy assessment comprise;
presenting, by one or more processors, a second threshold privacy assessment to a user that includes a second set of one or more questions for a second plurality of question/answer pairings that identify one or more privacy characteristics of the particular privacy campaign,receiving, by one or more processors, respective answers for the second plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign,determining a respective weighting factor for each of the second plurality of question/answer pairings,determining a respective relative risk rating for each of the second plurality of question/answer pairings,determining a second privacy risk score based upon, for each of the second plurality of question/answer pairings, the respective relative risk rating and the respective weighting factor, andelectronically associating the second privacy risk score with the particular privacy campaign; and
in response to determining that the threshold privacy risk score does not exceed the threshold privacy risk value, storing, by one or more processors, an indication that the particular privacy campaign is a low privacy risk campaign.
2 Assignments
0 Petitions
Accused Products
Abstract
Data processing computer systems, in various embodiments, are adapted for: (1) presenting a threshold privacy assessment that includes a first set of privacy-related questions for a privacy campaign; (2) receiving respective answers to the first set of questions; (3) using this initial set of answers to calculate an initial privacy risk score for the privacy campaign; (4) determining whether the privacy risk score exceeds the threshold privacy risk value; (5) in response to the privacy risk score exceeding the threshold privacy risk value, providing one or more supplemental questions to the user to facilitate the completion of a full privacy impact assessment. In some embodiments, in response to determining that the privacy risk score does not exceed the threshold privacy risk value, the systems and methods provide an indication that the particular privacy campaign is a relatively low privacy campaign.
451 Citations
20 Claims
-
1. A computer-implemented data processing method for efficiently conducting privacy risk assessments for a plurality of privacy campaigns, the method comprising, for each of the plurality of privacy campaigns:
-
presenting, by one or more processors, a threshold privacy assessment to a user that includes a first set of one or more questions for a first plurality of question/answer pairings that identify one or more privacy characteristics of a particular privacy campaign; receiving, by one or more processors, respective answers for the first plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, a threshold privacy risk score for the particular privacy campaign that identifies a level of risk for one or more of the privacy characteristics indicated in the first plurality of question/answer pairings; comparing, by one or more processors, the threshold privacy risk score to a threshold privacy risk value, the threshold privacy risk value indicating a pre-determined level of risk regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, whether the threshold privacy risk score exceeds the threshold privacy risk value; in response to determining that the threshold privacy risk score exceeds the threshold privacy risk value, performing, by one or more processors, an advanced privacy impact assessment that includes one or more steps in addition to steps performed during the threshold privacy assessment, wherein the one or more steps in addition to steps performed during the threshold privacy assessment comprise; presenting, by one or more processors, a second threshold privacy assessment to a user that includes a second set of one or more questions for a second plurality of question/answer pairings that identify one or more privacy characteristics of the particular privacy campaign, receiving, by one or more processors, respective answers for the second plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign, determining a respective weighting factor for each of the second plurality of question/answer pairings, determining a respective relative risk rating for each of the second plurality of question/answer pairings, determining a second privacy risk score based upon, for each of the second plurality of question/answer pairings, the respective relative risk rating and the respective weighting factor, and electronically associating the second privacy risk score with the particular privacy campaign; and in response to determining that the threshold privacy risk score does not exceed the threshold privacy risk value, storing, by one or more processors, an indication that the particular privacy campaign is a low privacy risk campaign. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A computer-implemented data processing method for efficiently conducting privacy risk assessments for a plurality of privacy campaigns, the method comprising, for each of the plurality of privacy campaigns:
-
presenting, by one or more processors, a threshold privacy assessment to a user that includes a first set of one or more questions for a first plurality of question/answer pairings that identify one or more privacy characteristics of a particular privacy campaign of the plurality of privacy campaigns; receiving, by one or more processors, respective answers for the first plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, a threshold privacy risk score for the particular privacy campaign that identifies a level of risk for one or more of the privacy characteristics indicated in the question/answer pairings; comparing, by one or more processors, the threshold privacy risk score to a threshold privacy risk value, the threshold privacy risk value indicating a pre-determined level of risk regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, whether the threshold privacy risk score exceeds the threshold privacy risk value; providing, by one or more processors and to the one or more privacy officers, (1) a first selection option to initiate an advanced privacy impact assessment that includes one or more steps in addition to steps performed during the threshold privacy assessment; and
(2) a second selection option to indicate that the particular privacy campaign is a low privacy risk campaign;in response to receiving an indication of selection of the first selection option by the one or more privacy officers, initiating, by one or more processors, the advanced privacy impact assessment, wherein the one or more steps in addition to steps performed during the threshold privacy assessment comprise; presenting, by one or more processors, a second threshold privacy assessment to a user that includes a second set of one or more questions for a second plurality of question/answer pairings that identify one or more privacy characteristics of the particular privacy campaign, receiving, by one or more processors, respective answers for the second plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign, determining a respective weighting factor for each of the second plurality of question/answer pairings, determining a respective relative risk rating for each of the second plurality of question/answer pairings, determining a second privacy risk score based upon, for each of the second plurality of question/answer pairings, the respective relative risk rating and the respective weighting factor, and electronically associating the second privacy risk score with the particular privacy campaign; and in response to receiving an indication of selection of the second selection option by the one or more privacy officers, storing, by one or more processors, an indication that the particular privacy campaign is a low privacy risk campaign. - View Dependent Claims (10, 11, 12, 13, 14, 15)
-
-
16. A computer-implemented data processing method for efficiently conducting privacy risk assessments for a plurality of privacy campaigns, the method comprising, for each of the plurality of privacy campaigns:
-
presenting, by one or more processors, a threshold privacy assessment to a user that includes a first set of one or more questions for a first plurality of question/answer pairings that identify one or more privacy characteristics of the particular privacy campaign; receiving, by one or more processors, respective answers for the first plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, a first privacy risk score for the particular privacy campaign that identifies a level of risk for one or more of the privacy characteristics indicated in the first plurality of question/answer pairings; comparing, by one or more processors, the first privacy risk score to a first threshold privacy risk value, the first threshold privacy risk value indicating a pre-determined level of risk regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, whether the first privacy risk score exceeds the first threshold privacy risk value; in response to determining that the first privacy risk score exceeds the first threshold privacy risk value, providing, by one or more processors, a privacy impact assessment to the user that includes a second set of questions for a second plurality of question/answer pairings that identify one or more privacy characteristics of the particular privacy campaign, the second set of one or more questions includes a greater number of questions than the first set of one or more questions; receiving, by one or more processors, respective answers for the second plurality of question/answer pairings regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, a second privacy risk score for the particular privacy campaign that identifies a level of risk for one or more of the privacy characteristics indicated in the second plurality of question/answer pairings; comparing, by one or more processors, the second privacy risk score to a second threshold privacy risk value, the second threshold privacy risk value indicating a pre-determined level of risk regarding the one or more privacy characteristics of the particular privacy campaign; determining, by one or more processors, whether the second privacy risk score exceeds the second threshold privacy risk value; in response to determining that the second privacy risk score exceeds the second threshold privacy risk value; providing, by one or more processors, an advanced privacy impact assessment to the user that includes a third set of questions for a third plurality of question/answer pairings that identify one or more privacy characteristics of the particular privacy campaign, wherein the third set of one or more questions includes a greater number of questions than the second set of one or more questions, determining a respective weighting factor for each of the third plurality of question/answer pairings, determining a respective relative risk rating for each of the third plurality of question/answer pairings, determining a third privacy risk score based upon, for each of the third plurality of question/answer pairings, the respective relative risk rating and the respective weighting factor, and electronically associating the third privacy risk score with the particular privacy campaign; in response to determining that the first privacy risk score does not exceed the first threshold privacy risk value, storing, by one or more processors, an indication that the particular privacy campaign is a low privacy risk campaign; and in response to determining that the second privacy risk score does not exceed the second threshold privacy risk value, storing, by one or more processors, the indication that the particular privacy campaign is a low privacy risk campaign. - View Dependent Claims (17, 18, 19, 20)
-
Specification