IP Library › Granted Patent US 11,645,353

Granted Patent B2

US 11,645,353 · App. 17/860,255 · Granted May 9, 2023

Data processing consent capture systems and related methods

Inventors: Jonathan Blake Brannon (Smyrna, GA); Patrick Whitney (Atlanta, GA)

Assignee: OneTrust, LLC

G06F16/972 G06F16/951 G06F16/9574 G06F16/9577 G06F40/174

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,645,353
App. No.: 17/860,255
Filed: Jul 8, 2022
Granted: May 9, 2023
Kind: B2
Examiner: JEON, JAE UK
Art Unit: 2193
USPC: 726/4

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

In various embodiments, a data processing consent capture system may be configured to prompt the data subject to consent to one or more types of data processing (e.g., to provide a desired consent) in response to identifying particular cookies (e.g., or types of data processing) that a data subject has not consented to. The system may, for example, substantially automatically prompt the data subject to consent for one or more particular types of data processing in response to determining that the user (e.g., data subject) has requested that a website or other system perform one or more functions that are not possible without a particular type of consent from the data subject. The system may, for example, prompt the user to consent in time for a certain interaction with the website, application, etc.

Claims (71)

1. A method comprising:

identifying, by computing hardware, a triggering event associated with a user interacting with a piece of software, wherein the triggering event comprises at least one of a passage of time the user has interacted with the piece of software, an amount of content viewed by the user via the piece of software, a number of selections made by the user in the piece of software, a distance the user has scrolled through the piece of software, a selection of a particular function available via the piece of software, or a transaction the user is conducting via the piece of software;

responsive to identifying the triggering event;

accessing, by the computing hardware, a consent map associated with the user and the piece of software, the consent map defining:

a plurality of types of consents required from the user associated with interacting with the piece of software; and

for each respective type of consent of the plurality of types of consents, one of an indicator of provided consent by the user or an indicator of unprovided consent by the user; and

analyzing, by the computing hardware, the consent map to determine a particular type of consent having the indicator of unprovided consent by the user;

responsive to determining that the particular type of consent has the indicator of unprovided consent by the user:

generating, by the computing hardware, a consent prompt that is customized to request consent for the particular type of consent; and

providing, by the computing hardware, the consent prompt to the user;

receiving, by the computing hardware, an indication of the user providing the consent for the particular type of consent; and

modifying, by the computing hardware, the consent map to identify the particular type of consent as having the indicator of provided consent by the user.

2. The method of claim 1 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a ranking of the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

3. The method of claim 1 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a number of transactions conducted through the piece of software requiring the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

4. The method of claim 1 further comprising:

subsequent to modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user, identifying, by the computing hardware, a particular transaction available through the piece of software;

responsive to identifying the particular transaction, analyzing, by the computing hardware, the consent map to determine the particular transaction requires the particular type of consent having the indicator of provided consent by the user; and

responsive to determining that the particular type of consent has the indicator of provided consent, allowing, by the computing hardware, the particular transaction to be conducted through the piece of software.

5. The method of claim 4 , wherein the particular transaction comprises at least one of installing a cookie, installing tracking technology, or collecting personal data of the user.

6. The method of claim 1 further comprising:

responsive to identifying the function, analyzing, by the computing hardware, the consent map to determine the function requires the particular type of consent having the indicator of provided consent by the user; and

responsive to determining that the particular type of consent has the indicator of provided consent, allowing, by the computing hardware, the user to perform the function through the piece of software.

7. The method of claim 1 , wherein the piece of software comprises at least one of a webpage or a mobile application.

8. A system comprising:

a non-transitory computer-readable medium storing instructions; and

a processing device communicatively coupled to the non-transitory computer-readable medium,

wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:

identifying a triggering event associated with a user interacting with a piece of software, wherein the triggering event comprises at least one of a passage of time the user has interacted with the piece of software, an amount of content viewed by the user via the piece of software, a number of selections made by the user in the piece of software, a distance the user has scrolled through the piece of software, a selection of a particular function available via the piece of software, or a transaction the user is conducting via the piece of software;

responsive to identifying the triggering event;

accessing a consent map associated with the user and the piece of software, the consent map defining:

a plurality of types of consents required from the user associated with interacting with the piece of software; and

for each respective type of consent of the plurality of types of consents, one of an indicator of provided consent by the user or an indicator of unprovided consent by the user; and

analyzing the consent map to determine a particular type of consent having the indicator of unprovided consent by the user;

responsive to determining that the particular type of consent has the indicator of unprovided consent by the user, providing a consent prompt to request consent for the particular type of consent;

receiving an indication of the user providing the consent for the particular type of consent; and

modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user.

9. The system of claim 8 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a ranking of the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

10. The system of claim 8 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a number of transactions conducted through the piece of software requiring the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

11. The system of claim 8 , wherein the operations further comprise:

subsequent to modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user, identifying a particular transaction available through the piece of software;

responsive to identifying the particular transaction, analyzing the consent map to determine the transaction requires the particular type of consent having the indicator of provided consent by the user; and

responsive to determining that the particular type of consent has the indicator of provided consent, allowing the particular transaction to be conducted through the piece of software.

12. The system of claim 8 , wherein the operations further comprise:

subsequent to modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user, identifying a function available through the piece of software;

responsive to identifying the function, analyzing the consent map to determine the function requires the particular type of consent having the indicator of provided consent by the user; and

responsive to determining that the particular type of consent has the indicator of provided consent, allowing the user to perform the function through the piece of software.

13. The system of claim 8 , wherein the operations further comprise:

analyzing the piece of software to identify a plurality of interactions associated the user interacting with the piece of software;

identifying the type of consent required from the user for each interaction of the plurality of interactions; and

analyzing a plurality of consent receipts for the user to identify for each respective type of consent the indicator of provided consent by the user or the indicator of unprovided consent by the user.

14. The system of claim 8 , wherein the piece of software comprises at least one of a webpage or a mobile application.

15. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by computing hardware, configure the computing hardware to perform operations comprising:

responsive to identifying the triggering event, analyzing a consent map associated with the user to determine that a particular type of consent of a plurality of types of consents has an indicator of unprovided consent by the user, wherein the consent map defines:

the plurality of types of consents required from the user associated with interacting with the piece of software; and

for each respective type of consent of the plurality of types of consents, one of an indicator of provided consent by the user or the indicator of unprovided consent by the user;

responsive to determining that the particular type of consent has the indicator of unprovided consent by the user, providing a consent prompt to request consent for the particular type of consent;

receiving an indication of the user providing the consent for the particular type of consent; and

modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user.

16. The non-transitory computer-readable medium of claim 15 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a ranking of the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

17. The non-transitory computer-readable medium of claim 15 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a number of transactions conducted through the piece of software requiring the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:

responsive to identifying the particular transaction, analyzing the consent map to determine the particular transaction requires the particular type of consent having the indicator of provided consent by the user; and

responsive to determining that the particular type of consent has the indicator of provided consent, invoking the particular transaction to be performed through the piece of software.

19. The non-transitory computer-readable medium of claim 18 , wherein the particular transaction comprises at least one of installing a cookie, installing tracking technology, or collecting personal data of the user.

20. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:

responsive to identifying the function, analyzing the consent map to determine the function requires the particular type of consent having the indicator of provided consent by the user; and

responsive to determining that the particular type of consent has the indicator of provided consent, invoking the function to be performed through the piece of software.