Granted Patent B2

US 11,392,720 · App. 16/872,130 · Granted Jul 19, 2022

Inventors: Jonathan Blake Brannon (Smyrna, GA); Casey Hill (Atlanta, GA)

Assignee: OneTrust, LLC

G06F21/6263G06F16/958G06F21/602G06F21/604

Abstract

Claims (103)

1. A computer-implemented data processing method comprising:

accessing, by one or more processors, a consent user interface presented on a web form, wherein the web form comprises consent information presented to a data subject completing the web form;

determining, by the one or more processors, one or more configuration attributes of the consent user interface;

accessing, by the one or more processors, one or more privacy regulations associated with presenting the consent information;

comparing, by the one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations, determining, by the one or more processors, a user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining, by the one or more processors, whether the consent user interface is compliant with each of the one or more privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more privacy regulations, flagging, by the one or more processors, the consent user interface in computer memory.

2. The computer-implemented data processing method of claim 1 , wherein the method further comprises:

in response to determining that the consent user interface is not compliant with the one or more privacy regulations, automatically modifying, by the one or more processors, one or more configuration attributes of the consent user interface; and

storing a modified consent user interface, wherein the modified consent user interface includes the automatically modified one or more configuration attributes of the consent user interface.

3. The computer-implemented data processing method of claim 1 , wherein the one or more configuration attributes is selected from a group consisting of:

a first selection option presented to the data subject for collection of personal data of the data subject;

a detailed selection option presented to the data subject for collection of each of one or more types of personal data of the data subject;

a position of a privacy policy within the consent user interface;

a second selection option for the data subject to be notified of one or more particular types of personal data collected by a system; and

one or more pieces of information collected by one or more cookies provided in the web form.

4. The computer-implemented data processing method of claim 1 , wherein determining the user interface consent score of the consent user interface further comprises:

for each of the one or more configuration attributes of the consent user interface,

comparing each particular configuration attribute to the one or more privacy regulations; and

calculating a configuration attribute level of compliance for each particular configuration attribute based at least in part on comparing the particular configuration attribute to the one or more privacy regulations; and

calculating the user interface consent score based at least in part on each calculated configuration attribute level of compliance.

5. The computer-implemented data processing method of claim 4 , wherein determining whether the consent user interface is compliant with each of the one or more privacy regulations further comprises:

comparing the user interface consent score to a threshold user interface consent score determined based at least in part on each of the one or more privacy regulations;

determining whether the user interface consent score is less than the threshold user interface consent score; and

in response to determining that the user interface consent score is less than the threshold user interface consent score, determining that the consent user interface is not compliant with the one or more privacy regulations.

6. The computer-implemented data processing method of claim 5 , wherein the threshold user interface consent score is provided by one or more privacy officers of an entity associated with the web form.

7. The computer-implemented data processing method of claim 1 , further comprising:

determining, by the one or more processors, that one or more privacy regulation updates have been provided to the one or more privacy regulations;

in response to determining that the one or more privacy regulation updates have been provided to the one or more privacy regulations, accessing, by the one or more processors, the updated one or more privacy regulations;

comparing, by the one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations, determining, by the one or more processors, an updated user interface consent score of the consent user interface with respect to each of the one or more updated privacy regulations;

determining, by the one or more processors, whether the consent user interface is compliant with each of the one or more updated privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more updated privacy regulations, flagging the consent user interface as non-compliant with the one or more updated privacy regulations.

8. The computer-implemented data processing method of claim 7 , wherein determining that one or more privacy regulation updates have been provided to the one or more privacy regulations further comprises automatically determining that one or more privacy regulation updates have been provided to the one or more privacy regulations.

9. A computer-implemented data processing method comprising:

accessing, by one or more processors, a consent user interface presented on a web form, wherein the web form comprises consent information presented to a data subject completing the web form;

determining, by the one or more processors, one or more configuration attributes of the consent user interface;

accessing, by the one or more processors, one or more privacy regulations associated with presenting the consent information;

comparing, by the one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations;

determining, by the one or more processors, whether the consent user interface is compliant with each of the one or more privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more privacy regulations, flagging, by the one or more processors, the consent user interface.

10. The computer-implemented data processing method of claim 9 , wherein the method further comprises:

in response to determining that the consent user interface is not compliant with the one or more privacy regulations, automatically modifying, by the one or more processors, one or more configuration attributes of the consent user interface; and

storing a modified consent user interface, wherein the modified consent user interface includes the automatically modified one or more configuration attributes of the consent user interface.

11. The computer-implemented data processing method of claim 9 , wherein the one or more configuration attributes is selected from a group consisting of:

a first selection option presented to the data subject for collection of personal data of the data subject;

a detailed selection option presented to the data subject for collection of each of one or more types of personal data of the data subject;

a position of a privacy policy within the consent user interface;

a second selection option for the data subject to be notified of one or more particular types of personal data collected by a system; and

one or more pieces of information collected by one or more cookies provided in the web form.

12. The computer-implemented data processing method of claim 9 , further comprising:

for each of the one or more configuration attributes of the consent user interface,

comparing each particular configuration attribute to the one or more privacy regulations, and

calculating a configuration attribute level of compliance for each particular configuration attribute based at least in part on comparing the particular configuration attribute to the one or more privacy regulations; and

calculating a user interface consent score based at least in part on each calculated configuration attribute level of compliance.

13. The computer-implemented data processing method of claim 12 , wherein determining whether the consent user interface is compliant with each of the one or more privacy regulations further comprises:

comparing the user interface consent score to a threshold user interface consent score determined based at least in part on each of the one or more privacy regulations;

determining whether the user interface consent score is less than the threshold user interface consent score; and

in response to determining that the user interface consent score is less than the threshold user interface consent score, determining that the consent user interface is not compliant with the one or more privacy regulations.

14. The computer-implemented data processing method of claim 13 , further comprising:

determining, by the one or more processors, that one or more privacy regulation updates have been provided to the one or more privacy regulations;

in response to determining that the one or more privacy regulation updates have been provided to the one or more privacy regulations, accessing, by the one or more processors, the updated one or more privacy regulations;

comparing, by the one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations, determining, by the one or more processors, an updated user interface consent score of the consent user interface with respect to each of the one or more updated privacy regulations;

determining, by the one or more processors, whether the consent user interface is compliant with each of the one or more updated privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more updated privacy regulations, flagging the consent user interface as non-compliant with the one or more updated privacy regulations.

15. A data processing consent user interface validity system, comprising:

one or more computer processors;

computer memory; and

a non-transitory computer-readable medium storing computer-executable instructions that, when executed by the one or more computer processors, cause the one or more computer processors to perform operations comprising:

accessing a consent user interface presented on a web form, wherein the web form comprises consent information presented to a data subject completing the web form;

determining one or more configuration attributes of the consent user interface;

accessing one or more privacy regulations associated with presenting the consent information;

comparing the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations, determining a user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining whether the consent user interface is compliant with each of the one or more privacy regulations; and

in response to determining that the consent user interface is not compliant with the one or more privacy regulations, flagging the consent user interface.

16. The data processing consent user interface validity system of claim 15 , further comprising:

in response to determining that the consent user interface is not compliant with the one or more privacy regulations, automatically modifying one or more configuration attributes of the consent user interface; and

storing a modified consent user interface, wherein the modified consent user interface includes the automatically modified one or more configuration attributes of the consent user interface.

17. The data processing consent user interface validity system of claim 15 , wherein the one or more configuration attributes is selected from a group consisting of:

a first selection option presented to the data subject for collection of personal data of the data subject;

a detailed selection option presented to the data subject for collection of each of one or more types of personal data of the data subject;

a position of a privacy policy within the consent user interface;

a second selection option for the data subject to be notified of one or more particular types of personal data collected by the system; and

one or more pieces of information collected by one or more cookies provided in the web form.

18. The data processing consent user interface validity system of claim 15 , wherein determining the user interface consent score of the consent user interface further comprises:

for each of the one or more configuration attributes of the consent user interface,

comparing each particular configuration attribute to the one or more privacy regulations;

calculating a configuration attribute level of compliance for each particular configuration attribute based at least in part on comparing the particular configuration attribute to the one or more privacy regulations; and

calculating the user interface consent score based at least in part on each calculated configuration attribute level of compliance.

19. The data processing consent user interface validity system of claim 18 , wherein determining whether the consent user interface is compliant with each of the one or more privacy regulations further comprises:

comparing the user interface consent score to a threshold user interface consent score determined based at least in part on each of the one or more privacy regulations;

determining whether the user interface consent score is less than the threshold user interface consent score; and

in response to determining that the user interface consent score is less than the threshold user interface consent score, determining that the consent user interface is not compliant with the one or more privacy regulations.

20. The data processing consent user interface validity system of claim 15 , further comprising:

determining that one or more privacy regulation updates have been provided to the one or more privacy regulations;

in response to determining that the one or more privacy regulation updates have been provided to the one or more privacy regulations, accessing the updated one or more privacy regulations;

comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations, determining an updated user interface consent score of the consent user interface with respect to each of the one or more updated privacy regulations;

determining whether the consent user interface is compliant with each of the one or more updated privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more updated privacy regulations, flagging the consent user interface as non-compliant with the one or more updated privacy regulations.

Assignments (2)

Continuity (23)

Cited By (2)

US 12,299,157 US 12,367,320