Privacy management systems and methods

1. A data processing system for determining readiness to comply with a set of privacy regulations, the system comprising:

one or more processors; and

computer memory storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:

generating a master compliance readiness questionnaire comprising a plurality of questions;

detecting, on a graphical user interface, a user selection of a first territory;

at least partially in response to detecting the user selection of the first territory:

determining a first set of regulations based at least in part on the first territory; and

generating a first compliance readiness questionnaire based at least in part on the first set of regulations, the first compliance readiness questionnaire comprising a plurality of questions;

detecting, on the graphical user interface, a user selection of a second territory;

at least partially in response to detecting the user selection of the second territory:

determining a second set of regulations based at least in part on the second territory; and

generating a second compliance readiness questionnaire based at least in part on the second set of regulations, the second compliance readiness questionnaire comprising a plurality of questions;

generating an ontology that:

maps a first question of the plurality of questions of the master compliance readiness questionnaire to a first question of the plurality of questions of the first compliance readiness questionnaire for the first set of regulations; and

maps a first question of the plurality of questions of the second compliance readiness questionnaire for the second set of regulations to the first question of the plurality of questions of the first compliance readiness questionnaire for the first set of regulations;

receiving a request to determine an extent of compliance with the second set of regulations;

at least partially in response to receiving the request to determine the extent of compliance with the second set of regulations, generating a prompt to a user requesting an answer to the first question of the plurality of questions of the master compliance readiness questionnaire;

receiving input from the user indicating the answer to the first question of the plurality of questions of the master compliance readiness questionnaire;

storing the answer to the first question of the plurality of questions of the master compliance readiness questionnaire;

accessing the ontology;

populating the first question of the plurality of questions of the first compliance readiness questionnaire for the first set of regulations with the answer to the first question of the plurality of questions of the master compliance readiness questionnaire using the ontology;

populating the first question of the plurality of questions of the second compliance readiness questionnaire for the second set of regulations with the answer to the first question of the plurality of questions of the first compliance readiness questionnaire for the first set of regulations using the ontology;

determining, based at least in part on the answer to the first question of the plurality of questions of the second compliance readiness questionnaire for the second set of regulations, an extent of compliance with the second set of regulations; and

automatically generating a notification of the extent of compliance with the second set of regulations.

2. The data processing system of claim 1 , wherein the operations further comprise storing an indication of the extent of compliance with the second set of regulations in a central repository.

3. The data processing system of claim 1 , wherein the operations further comprise:

mapping a second question of the plurality of questions of the master compliance readiness questionnaire to a second question of the plurality of questions of the first compliance readiness questionnaire for the first set of regulations; and

mapping the second question of the plurality of questions of the first compliance readiness questionnaire for the first set of regulations to a second question of the plurality of questions of the second compliance readiness questionnaire for the second set of regulations.

4. The data processing system of claim 1 , wherein detecting, on the graphical user interface, the user selection of the first territory comprises:

generating a listing comprising one or more indications of each of one or more sets of regulations; and

detecting a user selection of an indication associated with the first set of regulations from among the one or more indications of each of the one or more sets of regulations.

5. The data processing system of claim 1 , wherein the notification of the extent of compliance with the second set of regulations comprises an indication of a percentage of readiness to comply the second set of privacy regulations.

6. The data processing system of claim 1 , wherein the operations further comprise, at least partially in response to detecting the user selection of the first territory, presenting, on a graphical user interface, a summary of the first set of privacy regulations.

7. The data processing system of claim 1 , wherein determining, based at least in part on the answer to the first question of the plurality of questions of the second compliance readiness questionnaire for the second set of regulations, the extent of compliance with the second set of regulations comprises applying a weighting factor to the answer to the first question of the plurality of questions of the second compliance readiness questionnaire for the second set of regulations.

8. A computer-implemented data processing method for determining readiness to comply with a plurality of sets of privacy regulations, the method comprising:

generating, by one or more computer processors a master regulatory compliance readiness questionnaire comprising a plurality of questions;

detecting, by one or more computer processors on a graphical user interface, a user selection of a first territory;

at least partially in response to detecting the user selection of the first territory:

determining, by one or more computer processors, a first set of privacy regulations based at least in part on the first territory; and

generating, by one or more computer processors, a first regulatory compliance readiness questionnaire for the first set of privacy regulations, the first regulatory compliance readiness questionnaire for the first set of privacy regulations comprising a plurality of questions;

detecting, by one or more computer processors on the graphical user interface, a user selection of a second territory;

at least partially in response to detecting the user selection of the second territory:

determining, by one or more computer processors, a second set of privacy regulations based at least in part on the second territory; and

generating, by one or more computer processors, a second regulatory compliance readiness questionnaire for the second set of privacy regulations, the second regulatory compliance readiness questionnaire for the second set of privacy regulations comprising a plurality of questions;

generating, by one or more computer processors, an ontology, wherein the ontology:

maps one or more questions from the first regulatory compliance readiness questionnaire for the first set of privacy regulations to a first question in the master regulatory compliance readiness questionnaire; and

maps one or more questions from the second regulatory compliance readiness questionnaire for the second set of privacy regulations to a first question in the first regulatory compliance readiness questionnaire for the first set of privacy regulations;

receiving, by one or more computer processors via the graphical user interface, a request to determine an extent of compliance with the second set of privacy regulations;

at least partially in response to receiving the request to determine the extent of compliance with the second set of privacy regulations, presenting, by one or more computer processors via the graphical user interface, a prompt requesting an answer to the first question in the master regulatory compliance readiness questionnaire from a user;

receiving, by one or more computer processors via the graphical user interface, input indicating the answer to the first question in the master regulatory compliance readiness questionnaire from the user;

storing, by one or more computer processors, the answer to the first question in the master regulatory compliance readiness questionnaire;

populating, by one or more computer processors using the ontology, the one or more questions from the first regulatory compliance readiness questionnaire with the answer to the first question in the master regulatory compliance readiness questionnaire;

populating, by one or more computer processors using the ontology, the one or more questions from the second regulatory compliance readiness questionnaire with the answer to the first question in the first regulatory compliance readiness questionnaire;

determining, by one or more computer processors based on the one or more questions from the second regulatory compliance readiness questionnaire, an extent of compliance with the second set of privacy regulations; and

automatically presenting, by one or more computer processors on the graphical user interface, an indication of the extent of compliance with the second set of privacy regulations.

9. The computer-implemented data processing method of claim 8 , wherein the ontology further maps one or more questions from a third regulatory compliance readiness questionnaire for a third set of privacy regulations to the first question in the first regulatory compliance readiness questionnaire.

10. The computer-implemented data processing method of claim 9 , further comprising:

populating, by one or more computer processors using the ontology, the one or more questions from the third regulatory compliance readiness questionnaire for the third set of privacy regulations with the answer to the first question in the first regulatory compliance readiness questionnaire;

determining, by one or more computer processors based on the one or more questions from the third regulatory compliance readiness questionnaire for the third set of privacy regulations, an extent of compliance with the third set of privacy regulations; and

automatically presenting, by one or more computer processors on the graphical user interface, an indication of the extent of compliance with the third set of privacy regulations.

11. The computer-implemented data processing method of claim 8 , further comprising:

receiving, by one or more computer processors via the graphical user interface, input indicating a third set of privacy regulations;

at least partially in response to receiving the input indicating the third set of privacy regulations, automatically generating a third regulatory compliance readiness questionnaire for the third set of privacy regulations; and

mapping one or more questions from the third regulatory compliance readiness questionnaire to the first question in the first regulatory compliance readiness questionnaire.

12. The computer-implemented data processing method of claim 8 , wherein:

the indication of the extent of compliance with the second set of privacy regulations comprises a percentage of readiness to comply the second set of privacy regulations.

13. The computer-implemented data processing method of claim 8 , further comprising determining, based on the extent of compliance with the second set of privacy regulations, an extent of compliance with a third set of privacy regulations.

14. The computer-implemented data processing method of claim 8 , wherein the first territory is a first country and the second territory is a second country.

15. A non-transitory computer-readable medium storing computer-executable instructions for determining readiness to comply with a plurality of sets of privacy regulations by:

generating, by one or more computer processors, a master compliance readiness questionnaire comprising a plurality of questions;

detecting, by one or more computer processors on a graphical user interface, a user selection of a first territory;

at least partially in response to detecting the user selection of the first territory:

determining, by one or more computer processors, a first set of regulations based at least in part on the first territory; and

generating, by one or more computer processors, a first compliance readiness questionnaire based at least in part on the first set of regulations, the first compliance readiness questionnaire comprising a plurality of questions;

detecting, by one or more computer processors on the graphical user interface, a user selection of a second territory;

at least partially in response to detecting the user selection of the second territory:

determining, by one or more computer processors, a second set of regulations based at least in part on the second territory; and

generating, by one or more computer processors, a second compliance readiness questionnaire based at least in part on the second set of regulations, the second compliance readiness questionnaire comprising a plurality of questions;

generating, by one or more computer processors, an ontology that:

maps a first question of the plurality of questions of the master compliance readiness questionnaire to a first question of the plurality of questions of the first compliance readiness questionnaire; and

maps a first question of the plurality of questions of the second compliance readiness questionnaire to the first question of the plurality of questions of the first compliance readiness questionnaire;

receiving, by one or more computer processors, a request to determine an extent of compliance with the second set of regulations;

at least partially in response to receiving the request to determine the extent of compliance with the second set of regulations, generating, by one or more computer processors, a prompt to a user requesting an answer to the first question of the plurality of questions of the master compliance readiness questionnaire;

receiving, by one or more computer processors, the answer to the first question of the plurality of questions of the master compliance readiness questionnaire from the user;

populating, by one or more computer processors, the first question of the plurality of questions of the first compliance readiness questionnaire with the answer to the first question of the plurality of questions of the master compliance readiness questionnaire using the ontology;

populating, by one or more computer processors, the first question of the plurality of questions of the second compliance readiness questionnaire with the answer to the first question of the plurality of questions of the first compliance readiness questionnaire using the ontology;

determining, by one or more computer processors, based at least in part on the answer to the first question of the plurality of questions of the second compliance readiness questionnaire, an extent of compliance with the second set of regulations; and

presenting, by one or more computer processors, an indication of the extent of compliance with the second set of regulations to the user.

16. The non-transitory computer-readable medium of claim 15 , wherein determining the extent of compliance with the second set of regulations further comprises determining a percentage of answers to questions in the second compliance readiness questionnaire that correspond to compliant answers to questions in the second compliance readiness questionnaire.

17. The non-transitory computer-readable medium of claim 15 , wherein determining the extent of compliance with the second set of regulations further comprises determining, based on an answer to the first question from the second compliance readiness questionnaire, that at least one control from a set of controls required by the second set of regulations has been implemented.

18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:

mapping a second question of the plurality of questions of the master compliance readiness questionnaire to a second question of the plurality of questions of the first compliance readiness questionnaire; and

mapping a second question of the plurality of questions of the second compliance readiness questionnaire to the second question of the plurality of questions of the first compliance readiness questionnaire.

19. The non-transitory computer-readable medium of claim 15 , wherein detecting the user selection of the second territory comprises:

generating a listing comprising one or more indications of each of one or more territories; and

detecting a user selection of an indication associated with the second territory from among the one or more indications of each of the one or more territories.

20. The non-transitory computer-readable medium of claim 15 , wherein detecting the user selection of the second territory comprises:

generating a graphical map comprising one or more indications of each of one or more territories; and

detecting a user selection of an indication associated with the second territory from among the one or more indications of each of the one or more territories.