Data processing systems for generating and populating a data inventory
In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). For example, a first data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc.
1. A method comprising:
identifying a first data asset found in a data network involved in handling a certain data;
generating a first data inventory for the first data asset, the first data inventory comprising a first plurality of attributes;
identifying a second data asset found in the data network involved in handling the certain data;
generating a second data inventory for the second data asset, the second data inventory comprising a second plurality of attributes;
modifying a data model for the data network to include the first data inventory and the second data inventory;
analyzing, by computing hardware, at least a portion of the first plurality of attributes to identify a data processing activity that utilizes the first data asset for the certain data;
analyzing, by the computing hardware, at least a portion of the second plurality of attributes to identify that the data processing activity also utilizes the second data asset for the certain data;
populating, by the computing hardware and based on analyzing the portion of the first plurality of attributes, the data model to include a first link to represent a first relationship between the first data asset and the data processing activity, wherein the first link associates the first data inventory with a third data inventory for the data processing activity, the third data inventory comprising a third plurality of attributes;
populating, by the computing hardware and based on analyzing the portion of the second plurality of attributes, the data model to include a second link to represent a second relationship between the second data asset and the data processing activity, wherein the second link associates the second data inventory with the third data inventory;
generating, by the computing hardware, a graphical user interface that comprises a visual representation of a flow of the certain data based on a data structure of the data model by:
configuring a first visual indication of the first data asset,
configuring a second visual indication of the second data asset,
configuring a third visual indication of an exchange of at least a piece of the certain data between the first data asset and the second data asset based on the first link and the second link; and
providing, by the computing hardware, the graphical user interface for displaying on a computing device the visual representation of the flow of the certain data.
2. The method of claim 1 , wherein the first relationship comprises the first data asset acting as a storage location for the data processing activity.
3. The method of claim 1 , wherein the second relationship comprises the second data asset acting as a data source for the data processing activity.
4. The method of claim 1 further comprising:
analyzing, by the computing hardware, at least a portion of the second plurality of attributes to identify a second data processing activity that also utilizes the second data asset for the certain data;
analyzing, by the computing hardware, at least a portion of a fourth plurality of attributes for a third data asset to identify that the second data processing activity also utilizes the third data asset for the certain data;
populating, by the computing hardware and based on analyzing the portion of the second plurality of attributes to identify the second data processing activity, the data model to include a third link to represent a third relationship between the second data asset and the second data processing activity, wherein the third link associates the second data inventory with a fifth data inventory for the second data processing activity, the fifth data inventory comprising a fifth plurality of attributes; and
populating, by the computing hardware and based on analyzing the portion of the fourth plurality of attributes, the data model to include a fourth link to represent a fourth relationship between the third data asset and the second data processing activity, wherein:
the fourth link associates a fourth data inventory for the third data asset with the fifth data inventory,
the fourth data inventory comprises the fourth plurality of attributes, and
generating the graphical user interface that comprises the visual representation of the flow of the certain data based on the data structure of the data model further comprises:
configuring a fourth visual indication of the third data asset, and
configuring a fifth visual indication of an exchange of at least a piece of the certain data between the second data asset and the third data asset based on the third link and the fourth link.
5. The method of claim 1 , wherein the first visual indication is configured on the graphical user interface as selectable, and the method further comprises providing, based on a selection of the first visual indication, a second graphical user interface for display on the computing device, the second graphical user interface comprising at least one attribute of the first plurality of attributes.
6. The method of claim 5 , wherein the at least one attribute comprises a data control implemented for the first data asset.
7. The method of claim 1 , wherein the third visual indication is configured on the graphical user interface as selectable, and the method further comprises providing, based on a selection of the third visual indication, a second graphical user interface for display on the computing device, the second graphical user interface comprising at least one attribute of the third plurality of attributes.
8. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
analyzing at least a portion of a first plurality of attributes to identify a data processing activity that utilizes a first data asset for a certain data handled in a data network;
analyzing at least a portion of a second plurality of attributes to identify that the data processing activity also utilizes a second data asset for the certain data;
populating, based on analyzing the portion of the first plurality of attributes, a data model for the data network to include a first link to represent a first relationship between the first data asset and the data processing activity, wherein:
the data model comprises:
a first data inventory for the first data asset, the first data inventory comprising the first plurality of attributes,
a second data inventory for the second data asset, the second data inventory comprising the second plurality of attributes, and
a third data inventory for the data processing activity, the third data inventory comprising a third plurality of attributes, and
the first link associates the first data inventory with the third data inventory;
populating, based on analyzing the portion of the second plurality of attributes, the data model to include a second link to represent a second relationship between the second data asset and the data processing activity, wherein the second link associates the second data inventory with the third data inventory; and
generating a graphical user interface that comprises a visual representation of a flow of the certain data based on a data structure of the data model by:
configuring a first visual indication of the first data asset,
configuring a second visual indication of the second data asset,
configuring a third visual indication of an exchange of at least a piece of the certain data between the first data asset and the second data asset based on the first link and the second link, wherein the graphical user interface is provided for displaying the visual representation on a computing device.
9. The system claim 8 , wherein the first relationship comprises the first data asset acting as a storage location for the data processing activity.
10. The system of claim 8 , wherein the second relationship comprises the second data asset acting as a data source for the data processing activity.
11. The system of claim 8 , wherein the operations further comprise:
analyzing at least a portion of the second plurality of attributes to identify a second data processing activity that also utilizes the second data asset for the certain data;
analyzing at least a portion of a fourth plurality of attributes for a third data asset to identify that the second data processing activity also utilizes the third data asset for the certain data;
populating, based on analyzing the portion of the second plurality of attributes to identify the second data processing activity, the data model to include a third link to represent a third relationship between the second data asset and the second data processing activity, wherein the third link associates the second data inventory with a fifth data inventory for the second data processing activity, the fifth data inventory comprising a fifth plurality of attributes; and
populating, based on analyzing the portion of the fourth plurality of attributes, the data model to include a fourth link to represent a fourth relationship between the third data asset and the second data processing activity, wherein:
the fourth link associates a fourth data inventory for the third data asset with the fifth data inventory,
the fourth data inventory comprises the fourth plurality of attributes, and
generating the graphical user interface that comprises the visual representation of the flow of the certain data based on the data structure of the data model involves:
configuring a fourth visual indication of the third data asset, and
configuring a fifth visual indication of an exchange of at least a piece of the certain data between the second data asset and the third data asset based on the third link and the fourth link.
12. The system of claim 8 , wherein:
the visual representation comprises a geographic map,
the first visual indication of the first data asset comprises a first geographic location of the first data asset, and
the second visual indication of the second data asset comprises a second geographic location of the second data asset.
13. The system of claim 8 , wherein generating the graphical user interface that comprises the visual representation of the flow of the certain data based on the data structure of the data model involves configuring a fourth visual indication of a risk level associated with the flow of the certain data between the first data asset and the second data asset.
14. The system of claim 8 , wherein the first visual indication is configured on the graphical user interface as selectable, a second graphical user interface is provided for display on the computing device based on a selection of the first visual indication, and the second graphical user interface comprises at least one attribute of the first plurality of attributes.
15. A non-transitory computer-readable medium having program code that is stored thereon, the program code executable by one or more processing devices for performing operations comprising:
analyzing a first attribute to identify a data processing activity that utilizes a first data asset for a certain data handled in a data network;
analyzing a second attribute to identify that the data processing activity also utilizes a second data asset for the certain data;
populating, based on the first attribute, a data model for the data network to include a first link to represent a first relationship between the first data asset and the data processing activity, wherein:
the data model comprises:
a first data inventory for the first data asset,
a second data inventory for the second data asset, and
a third data inventory for the data processing activity, and
the first link associates the first data inventory with the third data inventory;
populating, based on the second attribute, the data model to include a second link to represent a second relationship between the second data asset and the data processing activity, wherein the second link associates the second data inventory with the third data inventory; and
generating a graphical user interface that comprises a visual representation of a flow of the certain data based on a data structure of the data model by:
configuring a first visual indication of the first data asset,
configuring a second visual indication of the second data asset,
configuring a third visual indication of an exchange of at least a piece of the certain data between the first data asset and the second data asset based on the first link and the second link, wherein the graphical user interface is provided for displaying the visual representation on a computing device.
16. The non-transitory computer-readable medium of claim 15 , wherein the first relationship comprises the first data asset acting as a storage location for the data processing activity.
17. The non-transitory computer-readable medium of claim 15 , wherein the second relationship comprises the second data asset acting as a data source for the data processing activity.
18. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:
analyzing a third attribute to identify a second data processing activity that also utilizes the second data asset for the certain data;
analyzing a fourth attribute to identify that the second data processing activity also utilizes a third data asset for the certain data;
populating, based on analyzing the third attribute to identify the second data processing activity, the data model to include a third link to represent a third relationship between the second data asset and the second data processing activity, wherein the third link associates the second data inventory with a fifth data inventory for the second data processing activity; and
populating, based on analyzing the fourth attribute, the data model to include a fourth link to represent a fourth relationship between the third data asset and the second data processing activity, wherein:
the fourth link associates a fourth data inventory for the third data asset with the fifth data inventory, and
generating the graphical user interface that comprises the visual representation of the flow of the certain data based on the data structure of the data model involves:
configuring a fourth visual indication of the third data asset, and
configuring a fifth visual indication of an exchange of at least a piece of the certain data between the second data asset and the third data asset based on the third link and the fourth link.
19. The non-transitory computer-readable medium of claim 15 , wherein:
the visual representation comprises a geographic map,
the first visual indication of the first data asset comprises a first geographic location of the first data asset, and
the second visual indication of the second data asset comprises a second geographic location of the second data asset.
20. The non-transitory computer-readable medium of claim 15 , wherein the first visual indication is configured on the graphical user interface as selectable, a second graphical user interface is provided for display on the computing device based on a selection of the first visual indication, and the second graphical user interface comprises at least a portion of the first data inventory.