Granted Patent B2

US 12,216,794 · App. 18/326,558 · Granted Feb 4, 2025

Inventors: Jonathan Blake Brannon (Smyrna, GA); Patrick Whitney (Atlanta, GA); Alex Cash (New York, NY); Spencer Wyckoff (Atlanta, GA); Stephanie Hanson (Atlanta, GA); Pratik Doshi (Atlanta, GA)

Assignee: OneTrust, LLC

G06F21/6245G06F11/3065G06F11/34G06F21/604

Abstract

Claims (98)

1. A system comprising:

a non-transitory computer-readable medium storing instructions; and

a processing device communicatively coupled to the non-transitory computer-readable medium, wherein the processing device is configured to execute the instructions and thereby perform operations comprising:

receiving, via a first computing device, a session request comprising a request to access a particular service on the first computing device;

responsive to the session request, causing the first computing device to display a computer-readable indicium, wherein the computer-readable indicium comprises:

an indication of the session request; and

navigation instructions to navigate to a consent interface for the particular service;

receiving, via a second computing device, an indication of an interaction with the computer-readable indicium;

responsive to the interaction, causing the second computing device to follow the navigation instructions and display the consent interface, wherein the consent interface comprises:

a first mechanism for providing privacy-related user consent preferences for the particular service to process personal data; and

a second selectable mechanism to apply the privacy-related user consent preferences to the first computing device; and

responsive to receiving an indication of a selection of the second selectable mechanism on the second computing device:

transmitting the privacy-related consent preferences to the first computing device to prevent display of the consent interface on the first computing device; and

storing the privacy-related user consent preferences on the first computing device so that the privacy-related user consent preferences are applied with respect to the particular service processing the personal data on the first computing device.

2. The system of claim 1 , wherein the operations further comprise:

responsive to the session request, causing the first computing device to display a link to the consent interface;

receiving, via the first computing device, an indication of a selection of the link; and

responsive to the indication of the selection of the link, causing the first computing device to navigate to and display the consent interface.

3. The system of claim 1 , wherein the operations further comprise:

responsive to transmitting the privacy-related consent preferences to the first computing device, causing, by the processing device, the first computing device to access the particular service; and

facilitating, by the processing device, application of the privacy-related consent preferences to the particular service.

4. The system of claim 1 , wherein the operations further comprise:

responsive to transmitting the privacy-related consent preferences to the first computing device, causing the first computing device to access the particular service without additional user input on the first computing device.

5. The system of claim 1 , wherein the operations further comprise:

receiving, from the second computing device, modified privacy-related user consent preferences;

transmitting the modified privacy-related user consent preferences from the second computing device to the first computing device; and

storing the modified privacy-related user consent preferences on the first computing device so that the modified privacy-related user consent preferences are applied with respect to the particular service processing the personal data on the first computing device.

6. The system of claim 1 , wherein the operations further comprise:

receiving, via a third computing device, a second session request comprising a second request to access the particular service on the third computing device;

responsive to the second session request, causing the third computing device to display a second computer-readable indicium, wherein the second computer-readable indicium comprises:

a second indication of the second session request; and

second navigation instructions to navigate to the consent interface for the particular service;

receiving, via the second computing device, an indication of a second interaction with the second computer-readable indicium;

responsive to the second interaction:

causing the second computing device to follow the second navigation instructions and display the consent interface; and

pre-populating the first mechanism with the privacy-related user consent preferences; and

transmitting the privacy-related consent preferences to the third computing device to bypass the consent interface on the third computing device; and

storing the privacy-related user consent preferences on the third computing device so that the privacy-related user consent preferences are applied with respect to the particular service processing the personal data on the third computing device.

7. The system of claim 1 , wherein:

the computer-readable indicium is a bar code that, when scanned, is configured to provide the navigation instructions as a uniform resource locator associated with a session of the particular service associated with the session request;

the interaction includes a scan of the computer-readable indicium by the second computing device, and

causing the second computing device to follow the navigation instructions comprises causing the second computing device to navigate to the uniform resource locator containing the consent interface.

8. A method comprising:

receiving, by computing hardware via a first computing device, a session request comprising a request to access computing functionality on the first computing device;

responsive to the session request, causing, by the computing hardware, the first computing device to display a computer-readable indicium, wherein the computer-readable indicium comprises:

an indication of the session request; and

navigation instructions to navigate to a consent interface for the computing functionality;

receiving, by the computing hardware via a second computing device, an indication of an interaction with the computer-readable indicium;

responsive to the interaction, causing the second computing device to follow the navigation instructions and display the consent interface, wherein the consent interface comprises a mechanism for providing privacy-related user consent preferences for the computing functionality to process personal data;

receiving, by the computing hardware via the mechanism on the consent interface displayed on the second computing device, the privacy-related user consent preferences; and

responsive to receiving the privacy-related user consent preferences:

detecting, by the computing hardware, a change to the privacy-related user consent preferences

automatically transmitting, by the computing hardware, the changed privacy-related consent preferences from the second computing device to the first computing device based on a selection of a second selectable mechanism on the second computing device; and

causing, by the computing hardware, storage of the changed privacy-related user consent preferences on the first computing device so that the privacy-related user consent preferences are applied with respect to the computing functionality processing the personal data on the first computing device based on the selection of the second selectable mechanism on the second computing device.

9. The method of claim 8 , wherein the computing functionality comprises at least one of:

a software application available on the first computing device; or

a website being accessed on the first computing device.

10. The method of claim 8 , further comprising:

responsive to the session request, causing, by the computing hardware, the first computing device to display a link to the consent interface;

receiving, by the computing hardware via the first computing device, an indication of a selection of the link; and

responsive to the indication of the selection of the link, causing, by the computing hardware, the first computing device to navigate to and display the consent interface.

11. The method of claim 8 , further comprising:

responsive to receiving the privacy-related user consent preferences, causing, by the computing hardware, the first computing device to access the computing functionality; and

facilitating, by the computing hardware, application of the privacy-related consent preferences to the computing functionality.

12. The method of claim 8 , wherein:

the method further comprises accessing, by the computing hardware, prior privacy-related consent preferences provided in response to a prior session request to access the computing functionality on a third computing device; and

causing the second computing device to display the consent interface comprises pre-populating the mechanism for providing the privacy-related user consent preferences with the prior privacy-related consent preferences.

13. The method of claim 8 , further comprising:

receiving, by the computing hardware from the second computing device, modified privacy-related user consent preferences;

causing, by the computing hardware, an extension of the modified privacy-related user consent preferences from the second computing device to the first computing device; and

causing, by the computing hardware, storage of the modified privacy-related user consent preferences on the first computing device so that the modified privacy-related user consent preferences are applied with respect to the computing functionality on the first computing device.

14. The method of claim 13 , further comprising:

responsive to the extension of the privacy-related consent preferences from the second computing device to the first computing device, causing, by the computing hardware, the first computing device to access the computing functionality without additional user input on the first computing device.

15. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by computing hardware, configure the computing hardware to perform operations comprising:

receiving, via a first computing device, a session request comprising a request to access a particular service on the first computing device;

responsive to the session request, causing the first computing device to display a code that identifies the session request and navigation instructions;

receiving, from a second computing device that has followed the navigation instructions, the code;

responsive to receiving the code, causing the second computing device to navigate to and display a consent interface for the particular service, wherein the consent interface comprises a mechanism for providing privacy-related user consent preferences for the particular service to process personal data;

receiving, via the mechanism on the consent interface displayed on the second computing device, the privacy-related user consent preferences; and

responsive to receiving the privacy-related user consent preferences:

detecting, by the first computing device, a change to the privacy-related user consent preferences

automatically transmitting the changed privacy-related consent preferences to the first computing device based on a selection of a second selectable mechanism on the second computing device; and

storing the changed privacy-related user consent preferences on the first computing device so that the privacy-related user consent preferences are applied with respect to the particular service processing the personal data on the first computing device.

16. The non-transitory computer-readable medium of claim 15 , wherein:

the code comprises a computer-scannable code;

the navigation instructions are encoded in the computer-scannable code; and

receiving the code from the second computing device comprises receiving an indication that the second computing device has interacted with the computer-scannable code.

17. The non-transitory computer-readable medium of claim 15 , wherein the code comprises at least one of a machine-readable indicium, an image, or an alphanumeric code.

18. The non-transitory computer-readable medium of claim 15 , wherein the particular service comprises at least one of:

a software application available on the first computing device; or

a website being accessed on the first computing device.

19. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:

responsive to the session request, causing, by the first computing device to display a link to the consent interface;

receiving, via the first computing device, an indication of a selection of the link; and

responsive to the indication of the selection of the link, causing, the first computing device to navigate to and display the consent interface.

20. The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise:

receiving, via the consent interface displayed on the first computing device, a modification to the privacy-related user consent preferences; and

responsive to receiving the modification, modifying the privacy-related user consent preferences stored on the first computing device to include the modification.

Assignments (1)

Continuity (21)

References Cited (400)