Granted Patent B2

US 12,299,065 · App. 17/161,159 · Granted May 13, 2025

Inventors: Kevin Jones (Atlanta, GA); Casey Hill (Atlanta, GA); Jonathan Blake Brannon (Smyrna, GA); Mithun Babu (Bangalore, IN); Patrick Whitney (Atlanta, GA)

Assignee: OneTrust, LLC

G06F16/972G06F16/951G06F16/9574G06F16/9577G06F40/174

Abstract

Claims (42)

1. A method comprising:

prior to a data subject visiting a website, determining a website category associated with

the website by:

determining, by computing hardware, a website cookie that captures data subject information; and

determining, by the computing hardware, the website category of the website based on the website cookie; and

responsive to the data subject visiting the website:

determining, by the computing hardware, a geo-location of a computing device used by the data subject to interact with the website;

determining, by the computing hardware, a privacy law based on the website category and the geo-location of the computing device, the privacy law identifying a data processing consent required from the data subject in order for the website cookie to be able to capture data subject information for the data subject;

generating, by the computing hardware, consent information based on the privacy law;

generating, by the computing hardware, a consent interface for the data subject comprising the consent information, wherein a request for the data processing consent is positioned at a particular location within the consent interface based on the privacy law; and

providing, by the computing hardware, the consent interface for display to the data subject.

2. A method for dynamically determining user consent configurations, the method comprising:

scanning a website, by computing hardware, from a plurality of physical locations;

identifying, by the computing hardware, a type of technology available on the website for individuals accessing the website from each of the plurality of physical locations;

determining, by the computing hardware, a regulatory requirement for each of the physical locations of the plurality of physical locations based on the type of technology, each of the regulatory requirements comprising a respective consent notice requirement that must be met when providing the type of technology to individuals accessing the website from respective physical locations; and

generating, by the computing hardware, consent information for each of the consent notice requirements;

generating, by the computing hardware, a consent interface for each physical location of the plurality of physical locations and for the website, each consent interface comprising the consent information corresponding to a respective physical location that is arranged in at least one webpage layer according to the respective consent notice requirement for the respective physical location, wherein:

upon receiving a request from a first user to access the website from a first physical location found in the plurality of physical locations, the first user is prompted to complete the consent interface corresponding to the first physical location; and

upon receiving a response from the first user via the consent interface corresponding to the first physical location, access is provided to the first user to the website based on the response.

3. The method of claim 2 , wherein providing access to the first user based on the response comprises limiting access to the type of technology at the website.

4. The method of claim 2 , wherein generating the consent interface for each physical location of the plurality of physical locations comprises:

identifying respective consent information for the first physical location;

configuring the respective consent interface for the first physical location comprising the respective consent information arranged in a first webpage layer and a second webpage layer of the at least one webpage layer according to the respective consent notice requirement.

5. The method of claim 4 , wherein the respective consent notice requirement for the first physical location identifies placing a particular interface element for the respective consent information in the first webpage layer.

6. The method of claim 2 further comprising:

receiving a request from the first user to utilize a second type of technology on the website; and

modifying the consent interface in response to the request to utilize the second type of technology on the website based on a respective consent notice requirement associated with the second type of technology.

7. The method of claim 1 , wherein:

determining the website cookie that captures the data subject information comprises:

scanning the website; and

detecting, based on scanning the website, a script configured to set the website cookie that is to run on the website to capture the data subject information.

8. The method of claim 7 further comprising:

having the data subject prompted for the data processing consent via the consent interface;

determining that the data subject provided the data processing consent; and

in response to determining that the data subject provided the data processing consent, allowing the script to load on the website to set the website cookie.

9. The method of claim 2 ,

wherein the consent information comprises:

a first consent interface feature that is configured for soliciting consent for the type of technology and is arranged in a first webpage layer of the at least one webpage layer defined for the consent interface according to the respective consent notice requirement for the first physical location, and

a second consent interface feature that is configured for soliciting rejection of the consent for the type of technology and is arranged in a second webpage layer of the at least one webpage layer defined for the consent interface according to the respective consent notice requirement for the first physical location.

10. The method of claim 2 , wherein:

determining the regulatory requirement for each of the physical locations based on the type of technology comprises querying a global set of databases that comprises a respective set of regulatory requirements that apply within each respective one of the plurality of physical locations, and each respective set of regulatory requirements includes a plurality of respective consent notice requirements that must be met when providing any of a plurality of different types of technologies to individuals accessing the website from the respective location.

11. The method of claim 5 , wherein the respective consent notice requirement for the first physical location identifies placing a second particular interface element for the respective consent information in the second webpage layer.

Assignments (2)

Continuity (22)

References Cited (400)

Cited By (3)

US 12,463,950 US 12,632,898 US 12,719,871