Granted Patent B2

US 11,461,500 · App. 16/872,031 · Granted Oct 4, 2022

Inventors: Jonathan Blake Brannon (Smyrna, GA); Raju Bokade (Atlanta, GA); Austin Proctor (Atlanta, GA); Mithun Babu (Bangalore, IN); Madhusudhan Kunhambu (Bangalore, IN)

Assignee: OneTrust, LLC

G06F21/6263G06F21/604G06Q10/10G06Q50/265H04L67/52H04L67/535G06F3/04847G06F2221/2111G06Q30/0251

Abstract

Claims (90)

1. A computer-implemented data processing method for scanning a website and tracking data subject interaction with the website to provide data subject consent parameters for the website, the method comprising:

determining, by one or more processors, a data subject is interacting with a particular website;

determining, by one or more processors, one or more website parameters associated with the particular website, wherein determining the one or more website parameters associated with the particular website comprises:

scanning, by one or more processors, the particular website to determine one or more website cookies that capture data subject information; and

determining, by one or more processors, a website category of the particular website;

determining, by one or more processors, a geo-location of the data subject when the data subject is interacting with the particular website;

determining, by one or more processors, one or more data subject consent parameters based at least in part on the one or more website parameters associated with the particular website and the geo-location of the data subject when the data subject is interacting with the particular website; and

applying, by one or more processors, the one or more data subject consent parameters to the data subject interaction with the particular website.

2. The computer-implemented data processing method of claim 1 , wherein the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular website;

determining, by one or more processors, whether the one or more data subject consent parameters are fulfilled;

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

3. The computer-implemented data processing method of claim 1 , wherein the website category is based at least in part on whether the particular website provides one or more targeted advertisements to the data subject.

4. The computer-implemented data processing method of claim 1 , wherein scanning the particular website to determine one or more website cookies that capture data subject information, further comprises:

identifying one or more website cookies that capture data subject information;

for each of the identified one or more website cookies,

determining one or more types of personal data captured by each of the identified one or more website cookies; and

storing the one or more types of personal data captured by each of the identified one or more website cookies.

5. The computer-implemented data processing method of claim 1 , wherein determining one or more data subject consent parameters further comprises:

accessing one or more privacy laws associated with the geo-location of the data subject; and

applying the one or more privacy laws as the one or more data subject consent parameters.

6. The computer-implemented data processing method of claim 1 , wherein the one or more data subject consent parameters comprises at least in part that the data subject scroll to an ending portion of a particular webpage at the particular website for the data subject consent to be provided by the data subject, and the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular webpage of the particular website;

determining, by one or more processors, whether the data subject scrolled to the ending portion of the particular webpage at the particular website;

in response to determining that the data subject scrolled to the ending portion of the particular webpage at the particular website, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

7. The computer-implemented data processing method of claim 1 , wherein the one or more data subject consent parameters comprises at least in part that the data subject select a button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data, and the method further comprises:

tracking, by one or more processors, the data subject interaction with a particular webpage of the particular website;

determining, by one or more processors, whether the data subject selected the button provided on the particular website indicating that the data subject consents to collection of one or more pieces of personal data;

in response to determining that the data subject selected the button provided on the particular website indicating that the data subject consents to collection of the one or more pieces of personal data, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

8. A computer-implemented data processing method for scanning a website and tracking data subject interaction with the website to provide data subject consent parameters for the website, the method comprising:

determining, by one or more processors, a data subject is interacting with a particular website;

determining, by one or more processors, one or more website parameters associated with the particular website, wherein determining the one or more website parameters associated with the particular website comprises:

scanning, by one or more processors, the particular website to determine one or more website cookies that capture data subject information;

determining, by one or more processors, a geo-location of the data subject when the data subject is interacting with the particular website;

determining, by one or more processors, one or more data subject consent parameters based at least in part on the one or more website parameters associated with the particular website and the geo-location of the data subject when the data subject is interacting with the particular website;

tracking, by one or more processors, the data subject interaction with the particular website;

determining, by one or more processors, whether the one or more data subject consent parameters are fulfilled;

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

9. The computer-implemented data processing method of claim 8 , wherein the method further comprises:

determining, by one or more processors, a website category for the particular website, wherein the website category is based at least in part on whether the particular website provides one or more targeted advertisements to the data subject.

10. The computer-implemented data processing method of claim 8 , wherein scanning the particular website to determine one or more website cookies that capture data subject information, further comprises:

identifying one or more website cookies that capture data subject information;

for each of the identified one or more website cookies,

determining one or more types of personal data captured by each of the identified one or more website cookies; and

storing the one or more types of personal data captured by each of the identified one or more website cookies.

11. The computer-implemented data processing method of claim 8 , wherein determining one or more data subject consent parameters further comprises:

accessing one or more privacy laws associated with the geo-location of the data subject; and

applying the one or more privacy laws as the one or more data subject consent parameters.

12. The computer-implemented data processing method of claim 11 , wherein accessing one or more privacy laws associated with the geo-location of the data subject further comprises:

determining whether one or more updates have been applied to the one or more privacy laws associated with the geo-location of the data subject; and

in response to determining that one or more updates have been applied to the one or more privacy laws associated with the geo-location of the data subject, accessing the one or more updated privacy laws associated with the geo-location of the data subject.

13. The computer-implemented data processing method of claim 8 , wherein the one or more data subject consent parameters comprises at least in part that the data subject scroll to an ending portion of a particular webpage at the particular website for the data subject consent to be provided by the data subject, and the method further comprises:

determining, by one or more processors, whether the data subject scrolled to the ending portion of the particular webpage at the particular website; and

in response to determining that the data subject scrolled to the ending portion of the particular webpage at the particular website, determining that the one or more data subject consent parameters are fulfilled.

14. The computer-implemented data processing method of claim 8 , wherein the one or more data subject consent parameters comprises at least in part that the data subject select a button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data, and the method further comprises:

determining, by one or more processors, whether the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data; and

in response to determining that the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of the one or more pieces of personal data, determining that the one or more data subject consent parameters are fulfilled.

15. A computer-implemented data processing method for scanning a website and tracking data subject interaction with the website to provide data subject consent parameters for the website, the method comprising:

determining, by one or more processors, a data subject is interacting with a particular website;

determining, by one or more processors, one or more website parameters associated with the particular website, wherein determining the one or more website parameters associated with the particular website comprises:

scanning, by one or more processors, the particular website to determine one or more website cookies that capture data subject information; and

determining, by one or more processors, a website category of the particular website;

determining, by one or more processors, a geo-location of the data subject when the data subject is interacting with the particular website;

determining, by one or more processors, one or more data subject consent parameters based at least in part on the one or more website parameters associated with the particular website and the geo-location of the data subject when the data subject is interacting with the particular website, wherein the one or more data subject consent parameters further comprise one or more privacy laws associated with the geo-location of the data subject; and

applying, by one or more processors, the one or more data subject consent parameters to the data subject interaction with the particular website.

16. The computer-implemented data processing method of claim 15 , wherein the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular website;

determining, by one or more processors, whether the one or more data subject consent parameters are fulfilled;

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

17. The computer-implemented data processing method of claim 15 , wherein the website category is based at least in part on whether the particular website provides one or more targeted advertisements to the data subject.

18. The computer-implemented data processing method of claim 15 , wherein scanning the particular website to determine one or more website cookies that capture data subject information, further comprises:

identifying one or more website cookies that capture data subject information;

for each of the identified one or more website cookies,

determining one or more types of personal data captured by each of the identified one or more website cookies; and

storing the one or more types of personal data captured by each of the identified one or more website cookies.

19. The computer-implemented data processing method of claim 15 , wherein the one or more data subject consent parameters comprises at least in part that the data subject scroll to an ending portion of a particular webpage at the particular website for the data subject consent to be provided by the data subject, and the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular webpage of the particular website;

determining, by one or more processors, whether the data subject scrolled to the ending portion of the particular webpage at the particular website;

in response to determining that the data subject scrolled to the ending portion of the particular webpage at the particular website, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

20. The computer-implemented data processing method of claim 15 , wherein the one or more data subject consent parameters comprises at least in part that the data subject select a button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data, and the method further comprises:

tracking, by one or more processors, the data subject interaction with a particular webpage of the particular website;

determining, by one or more processors, whether the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data;

in response to determining that the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of the one or more pieces of personal data, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

Assignments (3)

Continuity (23)

Cited By (6)

US 1,086,185 US 12,216,794 US 12,455,986 US 12,591,828 US 12,641,108 US 12,675,536