Data processing systems for processing data subject access requests

• US 10,438,017 B2
• Filed: 02/17/2019
• Issued: 10/08/2019
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Barday, Kabir A., Brannon, Jonathan Blake, Sabourin, Jason L.
• Primary Examiner(s): Khatri, Anil
• Application Number:
  US16/278,121
• Publication Number:
  US 20190180052A1
• Time in Patent Office: 233 Days
• Field of Search: 717101-109
• CPC Class Codes: G06F 15/76 Architectures of general purpose stored program computers with program plugboard G06F15/08; multicomputers G06F15/16
• CPC Class Codes: G06F 16/95 Retrieval from the web
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04L 67/53 using third party service providers

Abstract

In particular embodiments, a data subject request processing system may be configured to utilize one or more local storage nodes in order to process a data subject access request on behalf of a data subject. In particular embodiments, the one or more local storage nodes may be local to the data subject making the request (e.g., in the same country as the data subject, in the same jurisdiction, in the same geographic area, etc.). The system may, for example, be configured to: (1) receive a data subject access request from a data subject (e.g., via a web form); (2) identify a suitable local storage node based at least in part on the request and/or the data subject; (3) route the data subject access request to the identified local storage node; and (4) process the data subject access request at the identified local storage node.

Claims

1. A data subject access request processing system comprising:

one or more data subject access request management servers;

a plurality of local storage nodes, each of the plurality of local storage nodes being physically located in a distinct geographic location;

one or more processers; and

memory, wherein the one or more processers are configured for;

receiving, from a remote computing device, at the one or more data subject access request management servers, a data subject access request for a data subject, the request comprising one or more request parameters;

identifying, based at least in part on the data subject access request, a particular local storage node of the plurality of local storage nodes;

routing the data subject access request from the one or more data subject access request management servers to the particular local storage node;

processing the request at the particular local storage node by identifying one or more pieces of personal data associated with the data subject, the one or more pieces of personal data being stored in one or more data repositories associated with a particular organization;

taking one or more actions based at least in part on the data subject access request, the one or more actions including one or more actions related to the one or more pieces of personal data;

receiving one or more data retention rules;

in response to processing the data subject access request, automatically archiving the one or more pieces of personal data based at least in part on the one or more data retention rules; and

in response to archiving the one or more pieces of personal data, digitally storing metadata associated with the data subject access request.

2. The data subject access request processing system of claim 1, wherein:

the one or more actions are selected from the group consisting of;

deleting the one or more pieces of personal data from the one or more data repositories;

modifying at least one of the one or more pieces of personal data and storing the modified at least one of the one or more pieces of personal data in the one or more data repositories; and

generating a report comprising the one or more pieces of personal data and providing the report to the data subject.

3. The data subject access request processing system of claim 2, wherein:

the one or more actions comprise generating the report; and

the one or more processers are further configured for at least temporarily storing the one or more pieces of personal data at the particular local storage node.

4. The data subject access request processing system of claim 2, wherein:

the one or more actions comprise generating the report; and

the one or more processers are further configured for transmitting the one or more pieces of personal data to a data store associated with the particular organization.

5. The data subject access request processing system of claim 1, wherein the metadata comprises an indication of fulfillment of the data subject access request.

6. The data subject access request processing system of claim 1, wherein the one or more data retention rules are selected from the group consisting of:

(1) one or more rules relating to maintaining the one or more pieces of personal data in storage until the data is viewed by the data subject;

(2) one or more rules relating to maintaining the one or more pieces of personal data for no more than a particular amount of time;

(3) one or more rules based on the data subject; and

(4) one or more legal or industry requirements related to storage of personal data.

7. A computer-implemented data processing method for processing a data subject within a data system in order to fulfill a data subject access request, the method comprising:

receiving, by one or more processors, from a data subject, a data subject access request;

identifying, based at least in part on the data subject access request, a particular local storage node of a plurality of local storage nodes;

routing the data subject access request to the particular local storage node;

processing the data subject access request at the local storage node by identifying the one or more pieces of personal data associated with the data subject, wherein identifying the one or more pieces of personal data associated with the data subject comprises scanning one or more data inventories stored within a data system for the one or more pieces of personal data;

in response to identifying the one or more pieces of personal data, at least temporarily storing the one or more pieces of personal data at the local storage node;

providing access, to the data subject, to the one or more pieces of data at the local storage node;

accessing one or more data retention rules;

in response to processing the data subject access request, automatically archiving the one or more pieces of personal data based at least in part on the one or more data retention rules; and

in response to archiving the one or more pieces of personal data, digitally storing metadata associated with a completion of the data subject access request.

8. The computer-implemented data processing method of claim 7, wherein providing access to the data subject comprises transmitting a link to data subject to the one or more pieces of personal data at the local storage node.

9. The computer-implemented data processing method of claim 7, wherein:

the one or more data retention rules comprise;

a first rule to archive the one or more pieces of personal data in response to the data subject accessing the one or more pieces of personal data at the local storage node; and

a second rule to archive the one or more pieces of personal data in response to an expiration of a particular time period.

10. The computer-implemented data processing method of claim 9, the method further comprising:

determining that the data subject has accessed the one or more pieces of personal data at the local storage node; and

in response to determining that the data subject has accessed the one or more pieces of personal data at the local storage node, automatically archiving the one or more pieces of personal data and storing metadata indicating a time of the access by the data subject.

11. The computer-implemented data processing method of claim 9, the method further comprising:

determining that the particular time period has expired without the data subject accessing the one or more pieces of personal data; and

in response to determining that the particular time period has expired without the data subject accessing the one or more pieces of personal data, automatically archiving the one or more pieces of personal data and storing metadata indicating that the data subject did not access the one or more pieces of personal data prior to the expiration of the time period.

12. A computer-implemented data processing method for identifying one or more pieces of personal data associated with a data subject within a data system in order to fulfill a data subject access request, the method comprising:

receiving, by one or more processors, from a data subject, a data subject access request;

determining, by one or more processors, based on the data subject access request, a location of the request;

routing, by one or more processors, the data subject access request to one or more local storage nodes based at least in part on the location of the request; and

processing, by one or more processors at the one or more local storage nodes, the data subject access request by identifying the one or more pieces of personal data associated with the data subject, wherein;

identifying the one or more pieces of personal data associated with the data subject comprises accessing one or more data models defining a location of one or more data inventories stored within the data system for the one or more pieces of personal data; and

in response to identifying the one or more pieces of personal data, taking one or more actions selected from the group consisting of;

deleting the one or more pieces of personal data from the data system;

modifying at least one of the one or more pieces of personal data and storing the modified at least one of the one or more pieces of personal data in the data system; and

generating a report comprising the one or more pieces of personal data and providing the report to the data subject, wherein the method further comprises;

accessing one or more data retention rules;

in response to processing the data subject access request, automatically archiving the one or more pieces of personal data based at least in part on the one or more data retention rules; and

in response to archiving the one or more pieces of personal data, digitally storing metadata associated with a completion of the data subject access request.

13. The computer-implemented data processing method of claim 12, wherein:

the one or more actions comprise generating the report comprising the one or more pieces of personal data and providing the report to the data subject; and

generating the report comprising the one or more pieces of personal data comprises at least temporarily storing the one or more pieces of personal data at the one or more local storage nodes; and

providing access, to the data subject, to the one or more pieces of data at the one or more local storage nodes.

14. The computer-implemented data processing method of claim 13, wherein determining the location of the request comprises determining the location of the request based at least in part on an IP address of the request.

15. The computer-implemented data processing method of claim 13, wherein the one or more actions further comprise deleting at least one instance of the one or more pieces of personal data from the data system.

16. The computer-implemented data processing method of claim 12, wherein routing the data subject access request to the one or more local storage nodes based at least in part on the location of the request comprises:

identifying a physical location of the request;

identifying the one or more local storage nodes by identifying one or more local storage modes that share the physical location; and

routing the data subject access request to the one or more local storage nodes.

17. The computer-implemented data processing method of claim 16, wherein routing the data subject access request to the one or more local storage nodes comprises routing the data subject access request to the one or more local storage nodes such that the data subject access request does not pass through any server that is located in any location other than the physical location.

18. The computer-implemented data processing method of claim 17, wherein the physical location is defined by a location selected from the group consisting of:

a particular country;

a particular jurisdiction; and

a particular geographic area.