IP Library Granted Patent US 10,419,493
Granted Patent B2
US 10,419,493 · App. 16/220,899 · Granted Sep 17, 2019

Data processing systems and methods for performing privacy assessments and monitoring of new versions of computer code for privacy compliance

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,419,493
App. No.
16/220,899
Granted
Sep 17, 2019
Kind
B2
Abstract

In various embodiments, a data map generation system is configured to: (1) enable a user to specify one or more criteria; (2) identify one or more data flows based at least in part on the one or more specified criteria; (3) generate a data map based at least in part on the identified one or more data flows; and (4) display the data map to any suitable individual (e.g., the user). In particular embodiments, the system is configured to display all data flows associated with a particular organization that are stored within the system. In other embodiments, the system is configured to display all data flows that are associated with a particular privacy campaign undertaken by the organization.

Claims (63)

1. A computer-implemented data processing method for electronically analyzing computer code to generate a data map, the method comprising:

receiving, from a particular user, a request to generate a data map for one or more privacy-related attributes of a piece of computer code, the request comprising one or more criteria and a location of the computer code;

electronically obtaining the computer code based on the location provided by the particular user;

automatically electronically analyzing the computer code to determine the one or more privacy-related attributes of the computer code, each of the privacy-related attributes indicating one or more types of personal information that the computer code collects or accesses;

electronically generating a data map of the one or more privacy-related attributes based at least in part on the one or more criteria;

digitally storing the data map in computer memory; and

electronically displaying the data map to the particular user.

2. The computer-implemented data processing method of claim 1 , wherein:

the one or more criteria comprises a criteria to generate the data map based at least in part on a particular privacy campaign for which the computer code collects or accesses the one or more types of personal information.

3. The computer-implemented data processing method of claim 2 , wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location; and

generating a visual representation of the particular privacy campaign that includes the data.

4. The computer-implemented data processing method of claim 1 , wherein:

the one or more criteria comprise a criteria to generate a data map based at least in part on a particular type of the one or more types of personal information.

5. The computer-implemented data processing method of claim 1 , wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location;

identifying one or more pieces of the data that comprise the particular type of the one or more types of personal information; and

generating a visual representation of the particular type of the one or more types of personal information that includes the one or more pieces of the data that comprise the particular type of the one or more types of personal information.

6. The computer-implemented data processing method of claim 1 , wherein:

the one or more criteria comprises a criteria to generate a data map based at least in part on a plurality privacy campaigns.

7. The computer-implemented data processing method of claim 1 , the method further comprising:

receiving an indication that the computer code has been modified;

in response to receiving the indication, analyzing the computer code to identify one or more changes in the one or more privacy related attributes of the computer code; and

modifying the data map based at least in part on the identified one or more changes.

8. The computer-implemented data processing method of claim 7 , the method further comprising:

substantially continuously modifying the data map based at least in part on one or more additional changes identified in response to receiving one or more additional indications that the computer code has been modified.

9. The computer-implemented data processing method of claim 1 , wherein the one or more privacy-related attributes further identify a storage location of one or more pieces of personal information of the one or more types of personal information that the computer code collects or accesses.

10. The computer-implemented data processing method of claim 9 , wherein the one or more privacy-related attributes further identify one or more access permissions of the one or more pieces of personal information.

11. The computer-implemented data processing method of claim 1 , wherein the particular user comprises a privacy officer.

12. A computer-implemented data processing method for electronically analyzing computer code to generate a data map, the method comprising:

receiving, from a particular user, a request to generate a data map for one or more privacy-related attributes of a piece of computer code, the request comprising one or more criteria, wherein the one or more criteria comprise a criteria to generate the data map based at least in part on a particular privacy campaign for which the computer code collects or accesses the one or more types of personal information;

receiving a location of the computer code;

electronically obtaining the computer code based on the location of the computer code;

automatically electronically analyzing the computer code to determine the one or more privacy-related attributes of the computer code, each of the privacy-related attributes indicating one or more types of personal information that the computer code collects or accesses;

electronically generating a data map of the one or more privacy-related attributes based at least in part on the one or more criteria;

digitally storing the data map in computer memory; and

electronically displaying the data map to the particular user.

13. The computer-implemented data processing method of claim 12 , wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location; and

generating a visual representation of the particular privacy campaign that includes the data.

14. The computer-implemented data processing method of claim 12 , wherein electronically generating the data map comprises:

analyzing the computer code to identify a storage location of data comprising the one or more types of personal information;

retrieving the data from the storage location;

identifying one or more pieces of the data that comprise the particular type of the one or more types of personal information; and

generating a visual representation of the particular type of the one or more types of personal information that includes the one or more pieces of the data that comprise the particular type of the one or more types of personal information.

15. The computer-implemented data processing method of claim 12 , the method further comprising:

receiving an indication that the computer code has been modified;

in response to receiving the indication, analyzing the computer code to identify one or more changes in the one or more privacy related attributes of the computer code; and modifying the data map based at least in part on the identified one or more changes.

16. The computer-implemented data processing method of claim 15 , the method further comprising:

substantially continuously modifying the data map based at least in part on one or more additional changes identified in response to receiving one or more additional indications that the computer code has been modified.

17. A computer-implemented data processing method for electronically analyzing computer code to generate a data map, the method comprising:

generating a data map for one or more privacy-related attributes of a piece of computer code based on one or more criteria by:

receiving a location of the computer code;

electronically obtaining the computer code based on the location of the computer code;

automatically electronically analyzing the computer code to determine the one or more privacy-related attributes of the computer code, each of the privacy-related attributes indicating one or more types of personal information that the computer code collects or accesses; and

electronically generating the data map of the one or more privacy-related attributes based at least in part on the one or more criteria;

digitally storing the data map in computer memory; and

electronically displaying the data map to at least one particular user.

18. The computer-implemented data processing method of claim 17 , wherein the one or more privacy-related attributes further identify a storage location of one or more pieces of personal information of the one or more types of personal information that the computer code collects or accesses.

19. The computer-implemented data processing method of claim 18 , wherein the one or more privacy-related attributes further identify one or more access permissions of the one or more pieces of personal information.

Assignments (2)
SECURITY INTEREST Recorded Jul 5, 2022
From: ONETRUST LLC
To: KEYBANK NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
Reel/Frame 060573/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 5, 2019
From: BARDAY, KABIR A.
To: ONETRUST, LLC
Reel/Frame 048244/0139 →