Data processing systems and methods for operationalizing privacy compliance and assessing the risk of various respective privacy campaigns

• US 9,892,441 B2
• Filed: 05/31/2016
• Issued: 02/13/2018
• Est. Priority Date: 04/01/2016
• Status: Active Grant

• Current Assignee: OneTrust LLC
• Original Assignee: OneTrust LLC
• Inventors: Barday, Kabir A.
• Primary Examiner(s): Ouellette, Jonathan P
• Application Number:
  US15/169,643
• Publication Number:
  US 20170287029A1
• Time in Patent Office: 623 Days
• Field of Search: 705 11-912
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/063114 Status monitoring or status determination for a person or group
• CPC Class Codes: G06Q 10/063116 Schedule adjustment for a person or group
• CPC Class Codes: G06Q 10/0635 Risk analysis of enterprise or organisation activities
• CPC Class Codes: G06Q 10/101 Collaborative creation, e.g. joint development of products or services
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 50/26 Government or public services business processes related to the transportation industry G06Q50/40
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/63 for local operation

Abstract

Data processing systems and methods for retrieving data regarding a plurality of data privacy campaigns and for using that data to assess a relative risk associated with the data privacy campaign. In various embodiments, the system may be adapted to: (1) display one or more visual summaries of one or more data flow diagrams that visually depicts key features of the data flow, such as whether data is confidential and/or encrypted; (2) allow for multiple users to be assigned responsibility for populating different respective questions that are required to define the data flow; (3) automatically assess and display a relative risk associated with each campaign; and (4) automatically set, monitor, and facilitate the timely completion of an audit schedule for each campaign.

Claims

1. A computer-implemented data processing method for electronically receiving the input of campaign data related to a privacy campaign and electronically calculating a risk level for the privacy campaign based on the data input, comprising:

displaying, on a graphical user interface, a prompt to create an electronic record for the privacy campaign, wherein the privacy campaign utilizes personal data collected from at least one or more persons or one or more entities;

receiving a command to create an electronic record for the privacy campaign;

creating an electronic record for the privacy campaign and digitally storing the record;

presenting, on one or more graphical user interfaces, a plurality of prompts for the input of campaign data related to the privacy campaign;

electronically receiving the campaign data via input by one or more users, wherein the campaign data comprises each of;

a description of the campaign;

an identification of one or more types of particular personal data collected as part of the campaign;

at least one subject from which the particular personal data was collected;

a storage location where the particular personal data is to be stored; and

data indicating who will have access to the particular personal data;

processing the campaign data by electronically associating the campaign data with the record for the privacy campaign;

digitally storing the campaign data associated with the electronic record for the privacy campaign;

using one or more computer processors, calculating the risk level for the privacy campaign based on the campaign data and electronically associating the risk level with the electronic record for the campaign, wherein calculating the risk level for the campaign comprises;

electronically retrieving, from a data structure, the campaign data associated with the electronic record for the campaign;

electronically determining a weighting factor for each of a plurality of risk factors, wherein the plurality of risk factors comprises;

a nature of the particular personal data associated with the campaign;

a physical location of the particular personal data associated with the campaign;

a length of time that the particular personal data associated with the campaign will be retained in storage; and

a country of residence of at least one subject from which the particular personal data was collected;

electronically assigning a relative risk rating for each of the plurality of risk factors; and

electronically calculating a risk level for the campaign based upon, for each respective one of the plurality of risk factors, the relative risk rating for the respective risk factor and the weighting factor for the risk factor; and

digitally storing the risk level associated with the record for the campaign.

2. The method of claim 1, wherein the one or more users comprises an owner of the campaign.

3. The method of claim 1, wherein the one or more users comprises a privacy officer, and wherein the privacy officer inputs an initial portion of the campaign data.

4. The method of claim 3, wherein the initial portion of campaign data comprises the description of the campaign, and a business group responsible for administering the privacy operations related to that campaign.

5. The method of claim 1, wherein the method further comprises:

accepting an input to add a collaborator designated by the one or more users to input campaign data;

sending an electronic message to the collaborator regarding the addition of the collaborator for adding campaign data for the privacy campaign;

accepting one or more inputs of specific campaign data from the one or more collaborators; and

electronically associating the specific campaign data received from the input of the one or more collaborators with the electronic record of the campaign; and

digitally storing the specific campaign data received from the input of the collaborator with the record for the campaign.

6. The method of claim 5, wherein the added collaborator comprises a business representative.

7. The method of claim 1, wherein the plurality of prompts for the input of campaign data are presented to the one or more users through a series of computer-generated graphical user interfaces, wherein each of the series of computer-generated graphical user interfaces displays one or more of the plurality of prompts, and wherein each of the computer-generated graphical user interfaces are presented one at a time.

8. The method claim 7, wherein one or more of the computer-generated graphical user interfaces displaying the plurality of prompts displays an indicator, wherein, upon selection of the indicator, a real-time communication session is electronically instantiated between the user and the one or more collaborators in a computer-generated window, wherein the window having the real-time communications session overlays the one or more computer generated interfaces, covering at least a portion of the computer-generated graphical user interface.

9. The method of claim 1, wherein one or more fields for the entry of data inputs is automatically populated based on the data input history of the one or more users.

10. The method of claim 1, wherein one or more fields for the entry of data inputs is automatically populated based on the type of campaign data entered from a previous input.

11. The method of claim 1, wherein electronically receiving campaign data input by one or more users further comprises:

based on the input of campaign data received from the one or more users, presenting further prompts related to the campaign data that was input.

12. The method of claim 1, wherein the method further comprises:

determining that required campaign data has not been received, and

in response to determining that required campaign data has not been received, sending one or more electronic notifications that indicates that the required campaign data has not yet been provided.

13. The method of claim 1,

wherein the plurality of weighting factors are farther based upon a plurality of factors including:

the number of individuals having access to the particular personal data associated with the campaign; and

the type of individual from which the particular personal data associated with the campaign originated.

14. The method of claim 13, wherein the weighting factor is electronically assigned a higher numerical value if the risk associated with the factor is higher.

15. The method of claim 14, wherein risk level is electronically calculated as the sum of a plurality of:

a weighting factor multiplied by the relative risk rating of the factor.

16. The method of claim 1, wherein an overall risk assessment is determined for the campaign and digitally stored with the record for the campaign, and wherein each overall risk assessment is determined based upon a plurality of numerical ranges of risk level.

17. The method of claim 1, wherein the method further comprises:

electronically retrieving the electronic record and the campaign data associated with the electronic record; and

generating for display a computer-generated user interface comprising an inventory page.

18. The method of claim 17, wherein the inventory page displays a list of a plurality of privacy campaigns and respective visual indicators that represent the risk level for each listed campaign.

19. The method of claim 18, wherein the method further comprises:

receiving login information from the one or more users;

based upon the identity of the one or more users, determining which privacy campaign-related data the one or more users is authorized to view;

retrieving only the privacy campaign data that the one or more users is authorized to view; and

displaying the privacy campaign-related data that the one or more users is authorized to view on one or more graphical user interfaces, wherein one of the graphical user interfaces comprises the inventory page.

20. The method of claim 18, wherein the visual indicators represent an overall risk assessment for the campaign.

21. The method of claim 18, wherein the visual indicators comprise at least one type of visual indicator selected from a group of indicators consisting of:

an upward pointing arrow;

a downward pointing arrow; and

different respective colors for each overall risk assessment level.

22. The method of claim 18, wherein the list of the plurality of campaigns can be sorted based on risk.

28. The method of claim 22, wherein initiating electronic communications to facilitate the input of campaign data by the one or more users comprises sending an electronic message reminding one or more collaborators that they have not yet input at least a portion of the campaign data that they were designated to input.

29. The method of claim 22, wherein the electronic communications comprise a real-time communications session.

30. The method of claim 29, wherein the real-time communication session comprises an instant messaging session.

31. The method of claim 29, wherein the real-time communication session comprises a chat session.

23. A computer-implemented data processing method for electronically receiving the input of campaign data associated with a privacy campaign and electronically calculating a risk level for the privacy campaign based on the data input comprising:

creating an electronic record for the privacy campaign and digitally storing the record, wherein the privacy campaign utilizes personal data collected from at least one or more persons or one or more entities;

presenting on one or more graphical user interfaces a plurality of prompts for the input of campaign data related to the privacy campaign;

electronically receiving the campaign data via input by one or more users, wherein the campaign data comprises each of;

a description of the campaign;

an identification of one or more types of particular personal data collected a part of the campaign;

at least one subject from which the particular personal data was collected;

a storage location where the particular personal data is to be stored; and

data indicating who will have access to the particular personal data;

initiating electronic communications to facilitate the input of campaign data by the one or more users;

processing the campaign data by electronically associating the campaign data with the electronic record for the privacy campaign;

digitally storing the campaign data associated with the electronic record for the privacy campaign;

calculating the risk level for the privacy campaign based on the campaign data and electronically associating the risk level with the electronic record for the campaign, wherein calculating the risk level for the campaign comprises;

electronically retrieving, from a data structure, the campaign data associated with the record for the campaign;

electronically determining a weighting factor for each of a plurality of risk factors, wherein the plurality of risk factors comprises;

a nature of the particular personal data associated with the campaign;

a physical location of the particular personal data associated with the campaign;

a length of time that the particular personal data associated with the campaign will be retained in storage;

a type of individual from Which the particular personal data associated with the campaign originated; and

a country of residence of at least one subject from which the personal data was collected;

electronically assigning a relative risk rating for each of the plurality of factors; and

electronically calculating a risk level for the campaign based upon, for each respective one of the plurality of risk factors, the relative risk rating for the respective risk factor and the weighting factor the risk factor; and

digitally storing the risk level associated with the record for the campaign.

24. The method of claim 23, wherein initiating electronic communications to facilitate the input of campaign data by the one or more users comprises sending an electronic message to a collaborator assigned by the one or more users that the collaborator has been designated to provide at least a portion of campaign data.

25. The method of claim 24, wherein the portion of campaign data comprises data input in response to one of the plurality of prompts.

26. The method of claim 24, wherein the portion of campaign data comprises data input in response to a question.

27. The method of claim 24, wherein the portion of campaign data comprises data input in response to part of a question.

32. A computer-implemented data processing method for electronically receiving the input of campaign data related to a privacy campaign and electronically calculating a risk level for the privacy campaign based on the data inputs, comprising:

displaying, on a graphical user interface, a prompt to create an electronic record for the privacy campaign, wherein the privacy campaign utilizes personal data collected from at least one or more persons or one or more entities;

receiving a command to create an electronic record for the privacy campaign;

creating an electronic record for the privacy campaign and digitally storing the record;

presenting, on one or more graphical user interfaces, a plurality of prompts for the input of the campaign data related to the privacy campaign;

electronically receiving campaign data input by one or more users, wherein the campaign data comprises each of;

a description of the campaign;

an identification of one or more types of particular personal data collected as part of the campaign;

at least one subject from which the particular personal data was collected;

a storage location where the particular personal data is to be stored; and

data indicating who will have access to the particular personal data;

processing the campaign data by electronically associating the campaign data with the record for the privacy campaign;

digitally storing the campaign data associated with the electronic record for the campaign;

using one or more computer processors, calculating the risk level for the privacy campaign based on the campaign data and electronically associating the risk level with the electronic record for the campaign, wherein calculating the risk level for the campaign comprises;

electronically retrieving, from a data structure, the campaign data associated with the record for the campaign;

electronically determining a weighting factor for each of a plurality of risk factors, wherein the plurality of risk factors comprises;

a nature of the particular personal data associated with the campaign;

a physical location of the particular personal data associated with the campaign;

a length of time that the particular personal data associated with the campaign will be retained in storage; and

a country of residence of at least one subject from which the particular personal data was collected;

electronically assigning a relative risk rating for each of the plurality of risk factors; and

electronically calculating a risk level for the campaign based upon, for each respective one of the plurality of risk factors, the relative risk rating for the respective risk factor and the weighting factor for the risk factor, and

digitally storing the risk level associated with the record for the campaign;

generating, for display, an online graphical user interface, wherein the online graphical user interface comprises computer-generated prompts to input data, and wherein the graphical user interface displays an indicator, wherein if the indicator is selected, a real-time communication session is electronically instantiated;

receiving a computer-generated input from a particular user selecting the indicator;

retrieving a list of one or more collaborators associated with the electronic record related to the information displayed on the online graphical user interface, wherein the list of collaborators includes the particular user and at least one other person; and

electronically instantiating a real-time communication session between the particular user and the one or more collaborators in a computer-generated window, wherein the window having the real-time communications session overlays the online graphical user interface, covering at least a portion of the graphical user interface.

33. The method of claim 32, wherein the data comprises campaign data related to the privacy campaign.

34. The method of claim 32, wherein the user comprises an owner of the privacy campaign.

35. The method of claim 32, wherein the collaborator comprises a collaborator designated to input one or more portions of data comprising campaign data related to the privacy campaign.

36. The method of claim 32, wherein the graphical user interface comprises an online form comprising one or more fields in which a user can input data.

37. The method of claim 32, wherein the graphical user interface comprises a visually displayed shape that can be filled by the user to input data.

38. The method of claim 32, wherein the graphical user interface comprises a drop-down menu from which a user can select an item.

39. The method of claim 32, wherein the real-time communication session comprises an instant messaging session.

40. The method of claim 32, wherein the real-time communication session comprises a chat session.