Data processing systems for use in automatically generating, populating, and submitting data subject access requests
Computer systems and methods for: (1) analyzing electronic correspondence associated with a data subject (e.g., the emails within one or more email in-boxes associated with the data subject); (2) based on the analysis, identifying at least one entity that that the data subject does not actively do business with (e.g., as evidenced by the fact that the data subject no longer opens emails from the entity, and/or has set up a rule to automatically delete emails received from the entity); and (3) in response to identifying the entity as an entity that the data subject no longer does business with, at least substantially automatically populating and/or submitting a data subject access request to the entity (e.g., to delete all personal information being processed by the entity).
1. A computer-implemented data processing method of automatically submitting a data subject access request, the method comprising:
analyzing, by at least one computer processor, a plurality of e-mails sent to a particular data subject from a particular entity;
determining, by at least one computer processor, based on the analysis, that the particular data subject does not actively do business with the particular entity; and
at least partially in response to determining that the particular data subject does not actively do business with the particular entity, automatically submitting, by at least one computer processor,
a data subject access request to the particular entity on behalf of the data subject, wherein the data subject access request is a request that is selected from a group consisting of:
(1) a request to rectify inaccurate personal data of the data subject;
(2) a request to access of a copy of personal information of the data subject processed by the entity;
(3) a request to restrict the processing of the data subject's data; and
(4) a request to transfer the data subject's data to a specified controller,
wherein the step of determining that the particular data subject does not actively do business with the particular entity is made at least partially in response to determining that the data subject has established a software rule to automatically delete emails received from the particular entity.
2. The computer-implemented data processing method of claim 1 , wherein the step of determining that the particular data subject does not actively do business with the particular entity is made at least partially in response to determining that none of the plurality of e-mails has been opened.
3. The computer-implemented data processing method of claim 2 , wherein the data subject access request is a request to delete personal data of the data subject stored by the entity.
4. The computer-implemented data processing method of claim 3 , wherein the data subject access request is a request to delete all personal data of the data subject stored by the entity.
5. The computer-implemented data processing method of claim 1 , wherein the step of determining that the particular data subject does not actively do business with the particular entity is made at least partially in response to determining that the plurality of emails have been deleted without being opened.
6. The computer-implemented data processing method of claim 1 , wherein the step of determining that the particular data subject does not actively do business with the particular entity is made at least partially in response to determining that the data subject has established a software rule to automatically delete emails received from the particular entity.
7. The computer-implemented data processing method of claim 1 , wherein the step of determining that the particular data subject does not actively do business with the particular entity is made at least partially in response to determining that the data subject has established a software rule to automatically redirect emails received from the particular entity to a specified location.
8. A computer-implemented data processing method of automatically submitting a data subject access request, the method comprising:
analyzing, by at least one computer processor, a plurality of e-mails sent to a particular data subject from a particular entity;
determining, by at least one computer processor, based on the analysis, that the particular data subject does not actively do business with the particular entity; and
at least partially in response to determining that the particular data subject does not actively do business with the particular entity, automatically submitting, by at least one computer processor, a data subject access request to the particular entity on behalf of the data subject, wherein the step of determining that the particular data subject does not actively do business with the particular entity is made at least partially in response to making a determination selected from a group consisting of:
(1) that the data subject kept each of the emails open for a period of time less than a threshold period of time before closing them;
(2) that the data subject didn't accept at least one offer made by the entity within at least one of the emails;
(3) that the data subject didn't select a link included in at least one of the emails; and
(4) that the data subject has established a software rule to automatically delete emails received from the particular entity.
9. The computer-implemented data processing method of claim 1 , wherein the method further includes using optical character recognition techniques to identify the entity.
10. The computer-implemented data processing method of claim 1 , wherein the data subject access request is a request to delete personal data of the data subject stored by the entity.
11. A computer-implemented data processing method of automatically submitting a data subject access request, the method comprising:
using, by one or more computer processors, a software application to scan and index one or more user e-mails associated with a particular user, and identify a subject company from which each of the one or more user e-mails was received;
determining, by one or more computer processors, whether the user uses one or more services offered by the subject company; and
in response to determining that the user does not use one or more services offered by the subject company, substantially automatically submitting, by one or more processors, one or more data subject access requests to the subject company on behalf of the user, wherein:
the step of determining whether the user uses one or more services offered by the subject company comprises analyzing user interaction with each of the one or more e-mails; and
the step of determining, by one or more computer processors, whether the user uses one or more services offered by the subject company comprises at least one step selected from a group consisting of:
(1) determining whether the user opens any of the one or more e-mails received from the subject company;
(2) determining how long the user spends reviewing one or more of the e-mails that the user does open from the subject company;
(3) determining whether the user deletes one or more of the e-mails from the subject company without reading them;
(4) determining what portion of e-mails received from the subject company the user opens;
(5) determining whether the user accesses one or more links contained in one or more e-mails received from the subject company;
(6) determining how much time the user spends viewing a website linked in the one or more e-mails from the subject company; and
(7) determining whether the user has established a software rule to automatically delete the one or more e-mails received from the subject company.
12. The computer-implemented data processing method of claim 11 , wherein the software application comprises a browser plugin configured to interface with one or more web-based e-mail services.
13. The computer-implemented data processing method of claim 11 , wherein the software application comprises a software plugin configured to integrate with a software application for accessing e-mail on a computing device.
14. A computer-implemented data processing method of automatically submitting a data subject access request, the method comprising:
using, by one or more computer processors, a software application to scan and index one or more user e-mails associated with a particular user, and identify a subject company from which each of the one or more user e-mails was received, wherein scanning the one or more user e-mails comprises:
scanning one or more user e-mail components comprising one or more of:
(1) each of the user e-mails' subject field; (2) each of the user e-mails' body; and (3) each of the user e-mails' sender field; and
analyzing the scanned one or more user e-mail components to identify one or more of: (1) a name of the subject company; and (2) a domain associated with the subject company;
determining, by one or more computer processors, whether the user uses one or more services offered by the subject company,
wherein the step of determining whether the user uses one or more services offered by the subject company comprises analyzing user interaction with each of the one or more e-mails and further comprises determining whether the user has established a software rule to automatically delete one or more e-mails received from the subject company; and
in response to determining that the user does not use one or more services offered by the subject company,
substantially automatically submitting, by one or more processors, one or more data subject access requests to the subject company on behalf of the user.