Data processing consent management systems and related methods

1. A consent receipt management system comprising:

one or more processors; and

computer memory, wherein the consent receipt management system is configured for:

receiving a request to initiate an electronic transaction between an entity and a data subject, the electronic transaction involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the electronic transaction;

in response to receiving the request:

requesting, from the data subject, at least one piece of identifying information;

receiving the at least one piece of identifying information from the data subject;

determining, based at least in part on the at least one piece of identifying information, an age of the data subject;

determining, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of data under the electronic transaction;

in response to determining that the data subject meets the one or more age criteria, automatically initiating the electronic transaction; and

in response to determining that the data subject does not meet the one or more age criteria:

accessing an electronic guardian registry for one or more data subjects;

determining, based at least in part on the at least one piece of identifying information using the electronic guardian registry, that the data subject has an identified registered guardian;

communicating with the identified registered guardian to receive the valid consent to fulfill the electronic transaction on behalf of the data subject by:

 transmitting an electronic message to the identified guardian; and

 prompting the identified guardian to provide the valid consent via the electronic message; and

in response to receiving the valid consent, automatically initiating the electronic transaction.

2. The consent receipt management system of claim 1 , wherein determining, based at least in part on the at least one piece of identifying information, the age of the data subject comprises:

accessing, via one or more computer networks, one or more third-party data aggregation systems; and

determining, based at least in part on the at least one piece of identifying information using the one or more third-party data aggregation systems, the age of the data subject.

3. The consent receipt management system of claim 1 , wherein:

the at least one piece of identifying information comprises the age of the data subject; and

the consent receipt management system is configured for:

prompting the data subject to provide a response to each of one or more questions;

receiving the response to each of the one or more questions from the data subject;

confirming the age of the data subject based at least in part on the response to each of the one or more questions.

4. The consent receipt management system of claim 1 , wherein:

the electronic message comprises a unique code; and

the consent receipt management system is configured for:

prompting the data subject to provide the unique code;

receiving the unique code from the data subject; and

in response to receiving the unique code from the data subject, automatically initiating the electronic transaction.

5. The consent receipt management system of claim 4 , wherein the consent receipt management system is configured for:

generating the unique code;

determining an expiration time for the unique code;

in response to receiving the unique code from the data subject, determining whether the expiration time has elapsed;

in response to determining that the expiration time has elapsed:

terminating the unique code; and

generating and displaying a message to the data subject indicating that the unique code has expired.

6. The consent receipt management system of claim 1 , wherein the electronic guardian registry stores contact information for a respective guardian associated with each of a plurality of data subjects.

7. The consent receipt management system of claim 6 , wherein the electronic message is selected from the group consisting of:

a text message; and

an email.

8. The consent receipt management system of claim 6 , wherein the consent receipt management system is configured for:

providing access, to one or more guardians to the electronic guardian registry; and

enabling each of the one or more guardians to identify an associated data subject via the electronic guardian registry.

9. The consent receipt management system of claim 8 , wherein the consent receipt management system is further configured for:

receiving, via the electronic guardian registry, from each of the one or more guardians, an identification of one or more types of personal data, the processing of which the one or more guardians are willing to provide guardian consent on behalf of the associated data subject.

10. The consent receipt management system of claim 8 , wherein the consent receipt management system is further configured for:

receiving, via the electronic guardian registry, from each of the one or more guardians, an identification of one or more types of transactions for which the one or more guardians are willing to provide guardian consent on behalf of the associated data subject.

11. A computer-implemented data processing method for managing a consent receipt under a transaction, the method comprising:

providing, by one or more computer processors, at a consent capture point, a user interface for initiating the transaction between an entity and a data subject, the transaction involving processing personal data of the data subject by the entity;

receiving, by one or more computer processors, from the data subject, a request to initiate the transaction between the entity and the data subject;

in response to receiving the request, generating, by one or more computer processors, by a consent receipt management system, a consent record;

requesting, by one or more computer processors, from the data subject, at least one piece of identifying information;

receiving, by one or more computer processors, the at least one piece of identifying information from the data subject;

determining, by one or more computer processors, based at least in part on the at least one piece of identifying information, an age of the data subject;

electronically storing, by one or more computer processors, a unique subject identifier associated with the data subject, the age of the data subject, and a unique transaction identifier associated with the transaction in the consent record;

determining, by one or more computer processors, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of personal data under the transaction;

in response to determining the data subject meets the one or more age criteria for the processing of personal data under the transaction, modifying, by one or more computer processors, the consent record to electronically store an indication of valid consent comprising an indication that the data subject has provided valid consent for the transaction;

in response to determining the data subject does not meet the one or more age criteria for the processing of personal data under the transaction, implementing, by one or more computer processors, one or more guardian consent techniques to enable a guardian to provide the valid consent on behalf of the data subject;

receiving, by one or more computer processors, using the one or more guardian consent techniques, the valid consent; and

in response to receiving the valid consent, modifying, by one or more computer processors, the consent record to electronically store the indication of valid consent comprising an indication that the guardian has provided the valid consent for the transaction.

12. The computer-implemented data processing method of claim 11 , the method further comprising:

receiving a request from a data system associated with the entity to process a new piece of personal data associated with the data subject as part of the transaction;

in response to receiving the request to process the new piece of personal data, determining whether the consent record comprises the indication of valid consent;

in response to determining that the consent record comprises the indication of valid consent, automatically processing the new piece of personal data; and

in response to determining that the consent record does not comprise the indication of valid consent, automatically ceasing processing of the new piece of personal data.

13. The computer-implemented data processing method of claim 11 , wherein the one or more guardian consent techniques comprise:

accessing an electronic guardian registry for one or more data subjects;

determining, based at least in part on the at least one piece of identifying information using the electronic guardian registry, that the data subject has an identified registered guardian; and

communicating with the identified registered guardian to receive the valid consent to authorize the transaction on behalf of the data subject.

14. The computer-implemented data processing method of claim 13 , wherein communicating with the identified registered guardian to receive the valid consent to authorize the transaction on behalf of the data subject comprises transmitting an electronic message to the guardian.

15. The computer-implemented data processing method of claim 14 , wherein:

the electronic message comprises a unique code; and

the computer-implemented data processing method further comprises:

prompting the data subject to provide the unique code;

receiving the unique code from the data subject; and

in response to receiving the unique code from the data subject, modifying the consent record to electronically store the indication of valid consent comprising the indication that the guardian has provided the valid consent for the transaction.

16. The computer-implemented data processing method of claim 11 , wherein the one or more guardian consent techniques comprise:

identifying a prior transaction involving the data subject; and

identifying the guardian based on the prior transaction involving the data subject.

17. The computer-implemented data processing method of claim 16 , the method further comprising:

creating an electronic link between the data subject and the guardian in an electronic guardian registry based at least in part on the prior transaction.

18. The computer-implemented data processing method of claim 11 , wherein the computer-implemented data processing method further comprises:

receiving the valid consent from the guardian, the valid consent comprising:

consent to fulfill the transaction on behalf of the data subject; and

consent to fulfill one or more additional transactions on behalf of the data subject;

in response to receiving the valid consent from the identified guardian:

modifying the consent record to electronically store the indication of valid consent comprising the indication that the guardian has provided the valid consent for the transaction; and

storing an electronic indication associated with the unique subject identifier of the consent to fulfill the one or more additional transactions on behalf of the data subject.

19. The computer-implemented data processing method of claim 18 , the method further comprising:

receiving a second request to initiate a second transaction between the entity and the data subject, the second request comprising the unique subject identifier;

electronically associating the unique subject identifier and a unique second transaction identifier in computer memory;

determining, based at least in part on the unique subject identifier, whether a guardian associated with the data subject has previously provided the consent to fulfill the one or more additional transactions on behalf of the data subject; and

in response to determining that the guardian associated with the data subject has previously provided the consent to fulfill the one or more additional transactions on behalf of the data subject, modifying the consent record to electronically store an indication of a second valid consent.