Data processing systems and methods for bundled privacy policies
Data processing systems and methods, according to various embodiments, are adapted for determining an applicable privacy policy based on various criteria associated with a user and the associated product or service. User and product criteria may be obtained automatically and/or based on user input and analyzed by a privacy policy rules engine to determine the applicable policy. Text from the applicable policy can then be presented to the user. A default policy can be used when no particular applicable policy can be identified using by the rules engine. Policies may be ranked or prioritized so that a policy can be selected in the event the rules engine identifies two, conflicting policies based on the criteria.
1. A method comprising:
receiving, by computing hardware, an indication of an activation of a privacy policy information request control provided on a website displayed in a browser application;
responsive to receiving the indication of the activation of the privacy policy information request control, analyzing, by the computing hardware, browser data to determine a user parameter identifying a geographical location of a user device executing the browser application;
receiving, by the computing hardware, product or service information provided via a product or service parameter input displayed on the website;
determining, by the computing hardware based on the product or service information, a product or service parameter, wherein the product or service parameter comprises at least one of a particular product or service being provided or offered via the website, an entity offering or providing the particular product or service, a geographical location of the entity offering or providing the particular product or service, a type of the particular product or service, a subgroup of the entity offering or providing the particular product or service, or a geographical location of a computing system configured for at least one of hosting, providing, or facilitating access to the website;
identifying, by the computing hardware, based on the website, a rule group comprising a plurality of privacy policy rules;
executing, by the computing hardware, a privacy policy rules engine to analyze the plurality of privacy policy rules using the user parameter and the product or service parameter to identify an applicable privacy policy rule from the plurality of privacy policy rules;
identifying, by the computing hardware based on the applicable privacy policy rule, an applicable privacy policy;
configuring, by the computing hardware, a navigation element for display on the website, wherein the navigation element is configured for navigating to a display element that presents the applicable privacy policy;
transmitting, by the computing hardware, a first instruction to the browser application causing the browser application to present the navigation element on the website;
receiving, by the computing hardware, an indication of a selection of the navigation element; and
responsive to receiving the indication of the selection of the navigation element, transmitting, by the computing hardware, a second instruction to the browser application causing the browser application to retrieve and present the display element.
2. The method of claim 1 , wherein the privacy policy rules engine identifies the applicable privacy policy rule from the plurality of privacy policy rules based on the applicable privacy policy rule having a priority higher than a second privacy policy rule of the plurality of privacy policy rules that is also applicable based on the user parameter and the product or service parameter.
3. The method of claim 1 , wherein determining, based on the product or service information, the product or service parameter comprises evaluating a data inventory found in a data model to determine the product or service parameter.
4. The method of claim 1 , wherein the user parameter further comprises at least one of a language of a user of the user device, a territory of residence of the user, or a citizenship of the user.
5. The method of claim 1 , wherein the user parameter further comprises a language of a user of the user device and the applicable privacy policy is provided in the language.
6. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
receiving an indication of an activation of a privacy policy information request control provided on a user interface;
responsive to receiving the indication of the activation of the privacy policy information request control, determining a user parameter identifying a geographical location of a user device displaying the user interface;
receiving product or service information provided via a product or service parameter input displayed on the user interface;
determining, based on the product or service information, a product or service parameter, wherein the product or service parameter comprises at least one of a particular product or service being provided or offered via a website, an entity offering or providing the particular product or service, a geographical location of the entity offering or providing the particular product or service, a type of the particular product or service, a subgroup of the entity offering or providing the particular product or service, or a geographical location of a computing system configured for at least one of hosting, providing, or facilitating access to the website;
identifying, based on the user interface, a rule group comprising a plurality of privacy policy rules;
executing a privacy policy rules engine to analyze the plurality of privacy policy rules using the user parameter and the product or service parameter to identify an applicable privacy policy rule from the plurality of privacy policy rules;
identifying, based on the applicable privacy policy rule, an applicable privacy policy;
configuring a navigation element for display on the user interface, wherein the navigation element is configured for navigating to a display element that presents the applicable privacy policy;
transmitting the navigation element for display on the user interface;
receiving an indication of a selection of the navigation element; and
responsive to receiving the indication of the selection of the navigation element, transmitting an instruction to the user interface causing the user interface to retrieve and present the display element.
7. The system of claim 6 , wherein the user interface comprises at least one of a web page associated with the website or a display interface provided in a software application.
8. The system of claim 6 , wherein the privacy policy rules engine identifies the applicable privacy policy rule from the plurality of privacy policy rules based on the applicable privacy policy rule having a priority higher than a second privacy policy rule of the plurality of privacy policy rules that is also applicable based on the user parameter and the product or service parameter.
9. The system of claim 6 , wherein determining, based on the product or service information, the product or service parameter comprises evaluating a data inventory found in a data model to determine the product or service parameter.
10. The system of claim 6 , wherein the user parameter further comprises a language of a user of the user device and the applicable privacy policy is provided in the language.
11. A non-transitory computer-readable medium having program code that is stored thereon, the program code executable by one or more processing devices for performing operations comprising:
receiving an indication of an activation of a privacy policy information request control provided on a website displayed in a browser application;
responsive to receiving the indication of the activation of the privacy policy information request control, analyzing browser data to determine a user parameter identifying a geographical location of a user device executing the browser application;
determining a product or service parameter, wherein the product or service parameter comprises at least one of a particular product or service being provided or offered via the website, an entity offering or providing the particular product or service, a geographical location of the entity offering or providing the particular product or service, a type of the particular product or service, a subgroup of the entity offering or providing the particular product or service, or a geographical location of a computing system configured for at least one of hosting, providing, or facilitating access to the website;
identifying, based on the website, a rule group comprising a plurality of privacy policy rules;
executing a privacy policy rules engine to analyze a plurality of privacy policy rules using the user parameter and the product or service parameter to identify an applicable privacy policy rule from the plurality of privacy policy rules;
identifying, based on the applicable privacy policy rule, an applicable privacy policy;
configuring a navigation element for display on the website, wherein the navigation element is configured for navigating to a display element that presents the applicable privacy policy;
transmitting a first instruction to the browser application causing the browser application to present the navigation element on the website;
receiving an indication of a selection of the navigation element; and
responsive to receiving the indication of the selection of the navigation element, transmitting a second instruction to the browser application causing the browser application to retrieve and present the display element.
12. The non-transitory computer-readable medium of claim 11 , wherein the operations further comprise receiving product or service information provided via the website and used in determining the product or service parameter.
13. The non-transitory computer-readable medium of claim 11 , wherein the privacy policy rules engine identifies the applicable privacy policy rule from the plurality of privacy policy rules based on the applicable privacy policy rule having a priority higher than a second privacy policy rule of the plurality of privacy policy rules that is also applicable based on the user parameter and the product or service parameter.
14. The non-transitory computer-readable medium of claim 11 , wherein the user parameter further comprises at least one of a language of a user of the user device, a territory of residence of the user, or a citizenship of the user.