Data processing systems for orphaned data identification and deletion and related methods

• US 10,586,075 B2
• Filed: 09/06/2019
• Issued: 03/10/2020
• Est. Priority Date: 06/10/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Brannon, Jonathan Blake, Jones, Kevin, Patton-Kuhl, Dylan D., Kveen, Bryan Patrick, Pavlichek, Nicholas Ian, Crawford, Eliza Rose
• Primary Examiner(s): Deng, Anna C
• Application Number:
  US16/563,735
• Publication Number:
  US 20190392177A1
• Time in Patent Office: 186 Days
• Field of Search: 717101
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies

Abstract

In particular embodiments, an Orphaned Data Action System is configured to analyze one or more data systems (e.g., data assets), identify one or more pieces of personal data that are one or more pieces of personal data that are not associated with one or more privacy campaigns of the particular organization, and notify one or more individuals of the particular organization of the one or more pieces of personal data that are one or more pieces of personal data that are not associated with one or more privacy campaigns of the particular organization.

Claims

1. A computer-implemented data processing method for identifying one or more pieces of personal data that are not associated with one or more privacy campaigns of a particular entity, the method comprising:

accessing, by one or more processors, via one or more computer networks, one or more data assets of the particular entity;

scanning, by the one or more processors, the one or more data assets to generate a catalog of one or more privacy campaigns and one or more pieces of personal information associated with one or more individuals;

storing, by the one or more processors, the generated catalog in computer memory;

scanning, by the one or more processors, the one or more data assets based at least in part on the generated catalog to identify a first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity, wherein identifying the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity comprises;

determining that one or more privacy campaigns have been terminated within the one or more data assets of the particular entity,

scanning the one or more data assets based at least in part on the generated catalog to identify the one or more pieces of personal data that are associated with the terminated one or more privacy campaigns, and

generating an indication that the one or more pieces of personal data that are associated with the terminated one or more privacy campaigns are included in the first portion of the one or more pieces of personal data;

generating, by the one or more processors, an indication that the first portion of one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity is to be removed from the one or more data assets based at least in part on the indication that the one or more pieces of personal data that are associated with the terminated one or more privacy campaigns are included in the first portion of the one or more pieces of personal data;

presenting, by the one or more processors, the indication to one or more individuals associated with the particular entity; and

removing, by the one or more processors, the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity from the one or more data assets.

2. The computer-implemented data processing method of claim 1, wherein the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity are automatically removed from the one or more data assets.

3. The computer-implemented data processing method of claim 1, further comprising:

determining that one or more particular privacy campaigns of the particular entity have not been utilized in a period of time; and

in response to determining that the one or more particular privacy campaigns of the particular entity have not been utilized in a period of time, terminating the one or more particular privacy campaigns of the particular entity that have not been utilized in the period of time.

4. The computer-implemented data processing method of claim 3, wherein the period of time is ninety or more days.

5. The computer-implemented data processing method of claim 1, wherein presenting the indication to the one or more individuals associated with the particular entity further comprises:

receiving, by the one or more processors, a selection, by the one or more individuals associated with the particular entity, of a first set of the one or more pieces of personal data of the first portion of the one or more pieces of personal data to retain based on one or more bases to retain the first set of the one or more pieces of personal data;

prompting, by the one or more processors, the one or more individuals to provide one or more bases to retain the first set of the one or more pieces of personal data of the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns;

receiving, by the one or more processors, the provided one or more bases to retain the first set of the one or more pieces of personal data of the first portion of the one or more pieces of personal data from the one or more individuals associated with the particular entity;

retaining, by the one or more processors, the first set of the one or more pieces of personal data of the first portion of the one or more pieces of personal data; and

removing a second set of the one or more pieces of personal data of the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns from the one or more data assets, wherein the second set of the one or more pieces of personal data is different from the first set of the one or more pieces of personal data and the first portion of the one or more pieces of personal data comprises the first set of the one or more pieces of personal data and the second set of the one or more pieces of personal data.

6. The computer-implemented data processing method of claim 5, further comprising:

in response to receiving the provided one or more bases to retain the first set of the one or more pieces of personal data from the one or more individuals associated with the particular entity, submitting the provided one or more bases to retain the first set of the one or more pieces of personal data to one or more second individuals associated with the particular entity for authorization.

7. The computer-implemented data processing method of claim 5, wherein the second set of the one or more pieces of personal data does not include the first set of the one or more pieces of personal data.

8. A computer-implemented data processing method for removing one or more pieces of personal data that are not associated with one or more privacy campaigns of a particular entity, the method comprising:

accessing, by one or more processors, via one or more computer networks, one or more data models that map an association between (i) one or more pieces of personal data associated with one or more individuals stored within one or more data assets of the particular entity and (ii) one or more privacy campaigns of the particular entity;

analyzing, by the one or more processors, the one or more data models to identify a first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns, wherein identifying the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity comprises;

determining that one or more privacy campaigns have been terminated within the one or more data assets of the particular entity,

analyzing the one or more data models to identify one or more pieces of personal data that are associated with the terminated one or more privacy campaigns, and

generating an indication that the one or more pieces of personal data that are associated with the terminated one or more privacy campaigns are included in the first portion of the one or more pieces of personal data;

generating, by the one or more processors, an indication that the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity is to be removed from the one or more data assets of the particular entity based at least in part on the indication that the one or more pieces of personal data that are associated with the terminated one or more privacy campaigns are included in the first portion of the one or more pieces of personal data;

presenting, by the one or more processors, the indication to one or more individuals associated with the particular entity; and

automatically removing the first portion of the one or more pieces of personal data that are not associated with the one or more privacy campaigns of the particular entity from the one or more data assets.

9. The computer-implemented data processing method of claim 8, further comprising:

receiving, by one or more processors, an indication of a new privacy campaign initiated by the particular entity;

in response to receiving the indication of the new privacy campaign initiated by the particular entity, modifying the one or more data models to map an association between (i) one or more pieces of personal data associated with one or more individuals obtained in connection with the new privacy campaign and (ii) the new privacy campaign initiated by the particular entity.

10. The computer-implemented data processing method of claim 8, further comprising:

determining that one or more particular privacy campaigns of the particular entity have not been utilized in a period of time; and

in response to determining that the one or more particular privacy campaigns of the particular entity have not been utilized in the period of time, terminating the one or more privacy campaigns of the particular entity that have not been utilized in the period of time.

11. The computer-implemented data processing method of claim 10, wherein the period of time is ninety or more days.

12. A computer-implemented data processing method for generating a privacy data report of a particular entity, the method comprising:

accessing, by one or more processors, via one or more computer networks, one or more data models that map an association between (i) one or more pieces of personal information of one or more individuals stored within one or more data assets of the particular entity and (ii) one or more privacy campaigns of the particular entity;

accessing, by the one or more processors, a data collection policy of the particular entity that is based at least in part on one or more collection parameters defining how one or more pieces of personal data of one or more individuals are collected by the particular entity and one or more storage parameters associated with storing the one or more pieces of personal data of the one or more individuals;

accessing, via the one or more processors, one or more data retention metrics of the particular entity that are based at least in part on a collection of data under the data collection policy, wherein the one or more data retention metrics comprise at least one data retention metric selected from;

a storage location of the one or more pieces of personal data, a period of time the one or more pieces of personal data are stored by the particular entity, a number of the one or more privacy campaigns accessing the one or more pieces of personal data, and an amount of the one or more pieces of personal data being collected by the particular entity;

analyzing, by the one or more processors, the one or more data models to identify one or more pieces of personal data that are not associated with the one or more privacy campaigns;

generating, by one or more processors, a privacy data report based at least in part on (i) analyzing the one or more data models to identify one or more pieces of personal data that are not associated with the one or more privacy campaigns, (ii) the data collection policy of the particular entity, and (iii) the one or more data retention metrics of the particular entity; and

providing, by one or more processors, the privacy data report to one or more individuals associated with the particular entity, wherein the privacy data report comprises a comparison of the data collection policy and the one or more data retention metrics of the particular entity to one or more industry standard data collection policies and one or more industry standard data retention metrics.

13. The computer-implemented data processing method of claim 12, wherein generating the privacy data report further comprises:

calculating a data risk score for the particular entity based at least in part on (i) analyzing the one or more data models to identify one or more pieces of personal data that are not associated with the one or more privacy campaigns, (ii) the data collection policy of the particular entity, and (iii) the one or more data retention metrics of the particular entity.

14. The computer-implemented data processing method of claim 13, further comprising:

comparing the data risk score for the particular entity to a threshold data risk score;

determining that the data risk score for the particular entity is less than the threshold data risk score;

in response to determining that the data risk score for the particular entity is less than the threshold data risk score, generating a notification to indicate that the data risk score for the particular entity is less than the threshold data risk score; and

providing the notification to the one or more individuals associated with the particular entity.

15. The computer-implemented data processing method of claim 13, further comprising:

comparing the data risk score for the particular entity to a threshold data risk score;

determining that the data risk score for the particular entity is greater than or equal to the threshold data risk score;

in response to determining that the data risk score for the particular entity is greater than the threshold data risk score, generating a notification to indicate that the data risk score for the particular entity is greater than the threshold data risk score; and

providing the notification to the one or more individuals associated with the particular entity.