Data processing systems and methods for integrating privacy information management systems with data loss prevention tools or other tools for privacy design
Computer implemented methods, according to various embodiments, comprise: (1) integrating a privacy management system with DLP tools; (2) using the DLP tools to identify sensitive information that is stored in computer memory outside of the context of the privacy management system; and (3) in response to the sensitive data being discovered by the DLP tool, displaying each area of sensitive data to a privacy officer (e.g., similar to pending transactions in a checking account that have not been reconciled). A designated privacy officer may then select a particular entry and either match it up (e.g., reconcile it) with an existing data flow or campaign in the privacy management system, or trigger a new privacy assessment to be done on the data to capture the related privacy attributes and data flow information.
1. A system comprising:
processing hardware;
computer memory communicatively coupled to the processing hardware; and
a non-transitory computer-readable medium communicatively coupled to the processing hardware, and storing computer-executable instructions, wherein the processing hardware is configured for executing the computer-executable instructions and thereby performing operations comprising:
accessing a data map associated with personal data of a data subject;
identifying a plurality of pieces of data associated with the data subject in the data map;
determining that one or more of the plurality of pieces of data associated with the data subject comprise sensitive data;
comparing the sensitive data to privacy campaign data stored in one or more privacy campaign data records for a privacy campaign;
automatically determining, based on the comparison of the sensitive data and the privacy campaign data and without user input, that at least one portion of the sensitive data exactly matches at least one portion of the privacy campaign data;
determining, based on determining that the at least one portion of the sensitive data exactly matches the at least one portion of the privacy campaign data, whether each of the plurality of pieces of data is represented in an existing data flow for the privacy campaign;
in response to determining that each of the plurality of pieces of data is not represented in the existing data flow, automatically initiating a privacy risk assessment for the privacy campaign;
obtaining, based on the privacy risk assessment, one or more privacy attributes of the privacy campaign;
automatically generating a new data flow for the plurality of pieces of data; and
associating the privacy campaign and the one or more privacy attributes with the new data flow in the computer memory.
2. The system of claim 1 , wherein the operations further comprise calculating a risk level for the privacy campaign based on the one or more privacy attributes and associating the risk level with the particular privacy campaign in the computer memory.
3. The system of claim 2 , wherein:
the operations further comprise determining a weighting factor for each of the one or more privacy attributes; and
calculating the risk level is further based on the weighting factor for each of the one or more privacy attributes.
4. The system of claim 3 , wherein:
the operations further comprise determining a relative risk rating for each of the one or more privacy attributes; and
calculating the risk level is further based on the relative risk rating for each of the one or more privacy attributes.
5. The system of claim 1 , wherein the one or more privacy attributes comprise one or more of:
(a) a type of data subject from which personal data associated with the privacy campaign originated;
(b) a physical storage location of the personal data associated with the privacy campaign;
(c) a number of individuals having access to the personal data associated with the privacy campaign;
(d) a country of residence of at least one data subject from which the personal data associated with the privacy campaign was collected; or
(e) a length of time that the personal data associated with the privacy campaign will be stored.
6. The system of claim 1 , wherein the operations further comprise updating the existing data flow by associating the one or more privacy attributes with the existing data flow in the computer memory.
7. The system of claim 1 , wherein the operations further comprise:
identifying one or more data flows associated with the privacy campaign; and
updating each of the one or more data flows by associating the one or more privacy attributes with each of the one or more data flows in the computer memory.
8. The system of claim 1 , wherein the operations further comprise generating a graphical user interface comprising a visual representation of the new data flow.
9. A method comprising:
identifying, by computer hardware, a plurality of pieces of data associated with a data subject in a data map;
determining, by the computer hardware, that one or more of the plurality of pieces of data comprise sensitive data;
determining, by the computer hardware, that at least one portion of the sensitive data exactly matches at least one portion of privacy campaign data stored in one or more privacy campaign data records for a privacy campaign; and
reconciling, by the computer hardware based on determining that the at least one portion of the sensitive data exactly matches the at least one portion of the privacy campaign data, the plurality of pieces of data with a data flow for the privacy campaign by:
determining that each of the plurality of pieces of data is not represented in the data flow,
in response to determining at least one of the plurality of pieces of data is not represented in the data flow, updating the data flow by associating the at least one of the plurality of pieces of data with the data flow, and
generating an indication that processing of the plurality of pieces of data is complete.
10. The method of claim 9 , wherein generating the indication comprises updating an electronic log to indicate that the processing of the one or more of the plurality of pieces of data is complete.
11. The method of claim 9 , further comprising deleting an entry for the one or more of the plurality of pieces of data from a listing of data associated with the data subject to be processed.
12. The method of claim 9 , further comprising:
obtaining one or more privacy attributes of the privacy campaign based on a privacy risk assessment; and
updating the data flow by associating the one or more privacy attributes with the data flow.
13. The method of claim 9 , wherein determining that the one or more of the plurality of pieces of data comprise the sensitive data comprises receiving an indication of the sensitive data from a data loss prevention system.
14. The method of claim 13 , wherein receiving the indication of the sensitive data comprises receiving the indication of the sensitive data from the data loss prevention system via an application programming interface.
15. The method of claim 9 , wherein the sensitive data comprises one or more of:
(a) personal identification information;
(b) medical information; or
(c) financial information.
16. The method of claim 9 , further comprising:
generating a visual representation of the updated data flow; and
presenting the visual representation of the updated data flow to a user on a graphical user interface.
17. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by computing hardware, configure the computing hardware to perform operations comprising:
accessing a data map associated with personal data of a data subject;
identifying a plurality of pieces of data associated with the data subject in the data map;
determining that one or more of the plurality of pieces of data associated with the data subject comprise sensitive data;
comparing the sensitive data and privacy campaign data stored in one or more privacy campaign data records for a privacy campaign;
determining, based on the comparing of the sensitive data and the privacy campaign data and without user input, that one or more reconciliation criteria have been met;
determining, based on determining that the one or more reconciliation criteria have been met, that that at least one of the plurality of pieces of data is not represented in a data flow for the privacy campaign;
in response to determining that each of the plurality of pieces of data is not represented in the data flow, reconciling the plurality of pieces of data with the data flow for the privacy campaign by associating the at least one of the plurality of pieces of data with the data flow; and
storing an indication in computer memory that processing of the plurality of pieces of data is complete.
18. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise a step for initiating a privacy risk assessment for the privacy campaign in response to determining that each of the plurality of pieces of data is not represented in the data flow.
19. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise:
a step for obtaining one or more privacy attributes of the privacy campaign based on a privacy risk assessment; and
a step for updating the data flow by associating the one or more privacy attributes with the data flow.
20. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise receiving an indication for a data loss prevention system indicating that the one or more of the plurality of pieces of data associated with the data subject comprise the sensitive data.
21. The non-transitory computer-readable medium of claim 17 , wherein the one or more reconciliation criteria comprises a match of at least one portion of the privacy campaign data and a least one portion of the sensitive data.
22. The non-transitory computer-readable medium of claim 17 , wherein the one or more reconciliation criteria comprises a user confirmation of a match of at least one portion of the privacy campaign data and a least one portion of the sensitive data.
23. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise generating a graphical user interface comprising a visual representation of the data flow for the privacy campaign.