Data subject access request processing systems and related methods

1. A method comprising:

providing, by computing hardware, a query interface that is accessible via a public data network and that is configured for querying a plurality of data storage systems included in a private data network;

receiving, via the query interface and the public data network, a query comprising a data subject access request from a computing device;

accessing, by the computing hardware, a consent receipt key for a transaction associated with processing personal data for a data subject identified by the data subject access request;

accessing, by the computing hardware, transaction data for the transaction;

authenticating, by the computing hardware, the query by comparing the transaction data to the consent receipt key to determine that the transaction data comprises a subset of consent receipt key data associated with the consent receipt key; and

responsive to authenticating the query, facilitating, by the computing hardware, execution of processing operations or network communication for retrieving data responsive to the data subject access request from the plurality of data storage systems included in the private data network; or

preventing, based on a failure to authenticate the query, execution of the processing operations or performing network communication for retrieving data responsive to the data subject access request from the plurality of data storage systems included in the private data network.

2. The method of claim 1 , wherein accessing the transaction data comprises accessing the transaction data on the computing device.

3. The method of claim 2 , wherein the transaction data comprises a cookie.

4. The method of claim 1 , wherein the transaction data identifies the consent receipt key.

5. The method of claim 1 , wherein:

receiving the query comprises receiving the query via a web browser executing on the computing device; and

accessing the transaction data comprises accessing the transaction data from a cookie store accessible to the web browser.

6. The method of claim 1 , wherein:

the consent receipt key data comprises at least one of a transaction identifier for the transaction, a data subject identifier identifying the data subject, or an indication of consent provided by the data subject for the transaction; and

the transaction data comprises at least one of the transaction identifier, the data subject identifier, and the consent receipt key.

7. A system comprising:

a non-transitory computer-readable medium storing instructions; and

a processing device communicatively coupled to the non-transitory computer-readable medium, wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:

receiving, via a web browser on a user device, a data subject access request associated a data subject, the data subject access request comprising a data subject access request parameter;

accessing a consent receipt key for a transaction involving processing of personal data associated with the data subject as part of a transaction, the consent receipt key indicating consent, by the data subject, for the processing of personal data;

accessing transaction data for the transaction on the user device, the transaction data identifying the consent receipt key;

verifying an identity of the data subject based on receipt definitions associated with the consent receipt key and the transaction data; and

in response to verifying the identity of the data subject, processing the data subject access request based on the data subject access request parameter; or

preventing, based on a failure to verify the identity of the data subject, initiation of processing operations or network communication for retrieving data responsive to the data subject access request from a plurality of storage locations included in a private data network.

8. The system of claim 7 , wherein the transaction data comprises a unique cookie that is accessible to the web browser.

9. The system of claim 8 , wherein the unique cookie and the consent receipt key were generated in response to initiation of the transaction.

10. The system of claim 7 , wherein verifying the identity of the data subject based on the receipt definitions and the transaction data comprises confirming that the transaction data comprises at least a subset of the receipt definitions.

11. The system of claim 10 , wherein:

the receipt definitions comprise at least one of a transaction identifier for the transaction, a data subject identifier identifying the data subject, or an indication of consent provided by the data subject for the transaction; and

the transaction data comprises at least one of the transaction identifier, the data subject identifier, and the consent receipt key.

12. The system of claim 7 , wherein verifying the identity of the data subject based on the receipt definitions and the transaction data comprises confirming that the transaction data and the receipt definitions identify the transaction.

13. The system of claim 7 , wherein:

receiving the data subject access request via the web browser on the user device comprises receiving the data subject access request via a public data network; and

processing the data subject access request based on the data subject access request parameter comprises initiating processing operations or network communication for retrieving the personal data from a plurality of storage locations in a private computing network.

14. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by processing hardware, configure the processing hardware to perform operations, comprising:

receiving a data subject access request identifying a data subject, the data subject access request comprising a data subject access request parameter;

accessing a consent receipt key for a transaction involving processing of personal data associated with the data subject as part of a transaction, the consent receipt key indicating consent, by the data subject, for the processing of personal data;

accessing transaction data generated in response to initiation of the transaction;

verifying an identity of the data subject based on receipt definitions associated with the consent receipt key and the transaction data; and

in response to verifying the identity of the data subject, processing the data subject access request based on the data subject access request parameter; or

preventing, based on a failure to verify the identity of the data subject, initiation of processing operations or network communication for retrieving data responsive to the data subject access request from a plurality of storage locations included in a private data network.

15. The non-transitory computer-readable medium of claim 14 , wherein processing the data subject access request based on the data subject access request parameter comprises initiating processing operations or network communication for retrieving the personal data from a plurality of storage locations in a private computing network.

16. The non-transitory computer-readable medium of claim 14 , wherein:

receiving the data subject access request comprises receiving the data subject access request via a web browser executing on a computing device; and

accessing the transaction data comprises accessing the transaction data from a cookie store accessible to the web browser.

17. The non-transitory computer-readable medium of claim 16 , wherein the cookie store is local to the computing device.

18. The non-transitory computer-readable medium of claim 14 , wherein verifying the identity of the data subject based on the receipt definitions and the transaction data comprises confirming that the transaction data comprises at least a subset of the receipt definitions.