Automated data processing systems and methods for automatically processing data subject access requests using a chatbot
A chat robot may be used to facilitate interaction with a user in the determination of whether to initiate and process a data subject access request (DSAR). At a DSAR submission webpage, the chatbot may interact with a user to determine the information the user is in need of and/or the actions that the user may take. The chatbot may provide the information desired by the user, avoiding the processing overhead of submission and fulfillment of a DSAR. The chatbot may also facilitate completion of a DSAR on behalf of the user when needed.
1. A method comprising:
detecting, by computing hardware, browser data in a browser application executed on a user device, wherein the browser data comprises data subject information associated with a user;
generating, by the computing hardware and based on the browser data, a chatbot graphical user interface for the browser application by configuring a personal data display element on the chatbot graphical user interface and excluding a data subject access request element from the chatbot graphical user interface, wherein:
the personal data display element is configured for presenting a dataset comprising personal data associated with the user, and
the data subject access request element is configured for navigating to a data subject access request interface that initiates a data subject access request fulfillment process; and
transmitting, by the computing hardware, an instruction to the browser application causing the browser application to present the chatbot graphical user interface on the user device.
2. The method of claim 1 , wherein configuring the personal data display element comprises:
determining a storage node associated with the personal data based on the data subject information; and
retrieving the dataset from the storage node.
3. The method of claim 2 , wherein retrieving the dataset comprises identifying a subset of the personal data using a data model associated with the storage node.
4. The method of claim 1 , further comprising:
identifying a subset of the personal data using a data model associated with the storage node;
in response to detecting the second browser data, generating, by the computing hardware, a second chatbot graphical user interface for the browser application by configuring a data subject information entry element on the second chatbot graphical user interface; and
transmitting, by the computing hardware, a second instruction to the browser application causing the browser application to present the second chatbot graphical user interface on the user device.
5. The method of claim 1 , wherein the browser data comprises cookie data comprising the data subject information associated with a user.
6. The method of claim 1 , wherein the dataset further comprises an indication of a manner of usage of the personal data.
7. The method of claim 1 , wherein the personal data display element is further configured for presenting data subject access request submission instructions.
8. A system comprising:
a non-transitory computer-readable medium storing instructions; and
processing hardware communicatively coupled to the non-transitory computer-readable medium, wherein the processing hardware is configured to execute the instructions and thereby perform operations comprising:
detecting browser data in a browser application executed on a user device, wherein the browser data comprises data subject information associated with a user;
generating, based on the browser data, a chatbot graphical user interface for the browser application by configuring a personal data display element on the chatbot graphical user interface and excluding a data subject access request element from the chatbot graphical user interface, wherein:
the personal data display element is configured for presenting a dataset comprising personal data associated with the user, and
the data subject access request element is configured for navigating to a data subject access request interface that initiates a data subject access request fulfillment process; and
transmitting an instruction to the browser application causing the browser application to present the chatbot graphical user interface on the user device.
9. The system of claim 8 , wherein configuring the personal data display element comprises:
determining a storage node associated with the personal data based on the data subject information; and
retrieving the dataset from the storage node.
10. The system of claim 9 , wherein retrieving the dataset comprises identifying a subset of the personal data using a data model associated with the storage node.
11. The system of claim 8 , wherein the operations further comprise:
identifying a subset of the personal data using a data model associated with the storage node;
in response to detecting the second browser data, generating a second chatbot graphical user interface for the browser application by configuring a data subject information entry element on the second chatbot graphical user interface; and
transmitting a second instruction to the browser application causing the browser application to present the second chatbot graphical user interface on the user device.
12. The system of claim 8 , wherein the browser data comprises cookie data comprising the data subject information associated with a user.
13. The system of claim 8 , wherein the dataset further comprises an indication of a manner of usage of the personal data.
14. The system of claim 8 , wherein the personal data display element is further configured for presenting data subject access request submission instructions.
15. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by processing hardware, configure the processing hardware to perform operations comprising:
detecting browser data in a browser application executed on a user device, wherein the browser data comprises data subject information associated with a user;
generating, based on the browser data, a chatbot graphical user interface for the browser application by configuring a personal data display element on the chatbot graphical user interface and excluding a data subject access request element from the chatbot graphical user interface, wherein:
the personal data display element is configured for presenting a dataset comprising personal data associated with the user, and
the data subject access request element is configured for navigating to a data subject access request interface that initiates a data subject access request fulfillment process; and
transmitting an instruction to the browser application causing the browser application to present the chatbot graphical user interface on the user device.
16. The non-transitory computer-readable medium of claim 15 , wherein configuring the personal data display element comprises:
determining a storage node associated with the personal data based on the data subject information; and
retrieving the dataset from the storage node.
17. The non-transitory computer-readable medium of claim 16 , wherein retrieving the dataset comprises identifying a subset of the personal data using a data model associated with the storage node.
18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
identifying a subset of the personal data using a data model associated with the storage node;
in response to detecting the second browser data, generating a second chatbot graphical user interface for the browser application by configuring a data subject information entry element on the second chatbot graphical user interface; and
transmitting a second instruction to the browser application causing the browser application to present the second chatbot graphical user interface on the user device.
19. The non-transitory computer-readable medium of claim 15 , wherein the browser data comprises cookie data comprising the data subject information associated with a user.
20. The non-transitory computer-readable medium of claim 15 , wherein the personal data display element is further configured for presenting data subject access request submission instructions.