Granted Patent B2

US 12,591,828 · App. 18/117,190 · Granted Mar 31, 2026

Inventors: Kabir A. Barday (Atlanta, GA); Jason L. Sabourin (Brookhaven, GA); Jonathan Blake Brannon (Smyrna, GA); Mihir S. Karanjkar (Marietta, GA); Kevin Jones (Atlanta, GA)

Assignee: OneTrust, LLC

G06Q10/0635G06F15/76G06F21/552G06F21/577G06F21/6245G06Q10/067G06F16/95

Abstract

Claims (57)

1 . A method comprising:

providing, by computing hardware, an interface that is accessible via a first data network and is configured for searching a plurality of data storage systems included in a second data network;

receiving, by the computing hardware via the interface and the first data network, a data subject access request from a requestor;

verifying, by the computing hardware, an identity of the requestor;

responsive to receiving the data subject access request and verifying the identity, obtaining, by the computing hardware, metadata regarding at least one of a data subject identified by the data subject access request or the data subject access request;

responsive to determining that the data subject access request should be prioritized based on the metadata, prioritizing by the computing hardware, the data subject access request; and

facilitating, by the computing hardware, execution of processing operations or network communication for retrieving data responsive to the data subject access request from the plurality of data storage systems in the second data network.

2 . The method of claim 1 , the method further comprising:

identifying, by the computing hardware based on the metadata, a processing deadline constraint for the data subject access request; and

wherein facilitating the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request occurs in a manner that satisfies the processing deadline constraint.

3 . The method of claim 1 , wherein the metadata comprises at least one of a type of the data subject access request, a location of a computing device from which the data subject access request was received, or a status of the data subject.

4 . The method of claim 1 , wherein prioritizing the data subject access request comprises facilitating modification of a timing of the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request.

5 . The method of claim 1 , wherein determining that the data subject access request should be prioritized based on the metadata is further based on computing resources available on the second data network.

6 . The method of claim 1 , further comprising:

identifying, by the computing hardware based on the metadata, an identity verification constraint for processing the data subject access request;

determining, by the computing hardware based on identifying information associated with the data subject, whether the data subject access request satisfies the identity verification constraint; and

wherein facilitating the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request occurs in response to determining that the data subject access request satisfies the identify verification constraint.

7 . The method of claim 1 , further comprising:

generating, by the computing hardware, a graphical user interface and configuring the graphical user interface to include a display element that includes an indication of a priority adjustment to the data subject access request; and

providing, by the computing hardware, the graphical user interface for display on a computing device.

8 . A system comprising:

a non-transitory computer-readable medium storing instructions; and

a processing device communicatively coupled to the non-transitory computer-readable medium, wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:

providing an interface that is accessible via a first data network and is configured for searching a plurality of data storage systems included in a second data network;

receiving, via the interface and the first data network, a set of data subject access requests from a requestor;

verifying an identity of the requestor;

obtaining metadata for each data subject access request in the set of data subject access requests;

prioritizing, based on the metadata, the set of data subject access requests; and

executing processing operations or network communication for retrieving data responsive to each data subject access request in the set of data subject access requests from the plurality of data storage systems in the second data network.

9 . The system of claim 8 , wherein:

the operations further comprise identifying, for each data subject access request in the set of data subject access requests, a respective fulfillment constraint; and

prioritizing the set of data subject access requests comprises prioritizing such that the respective fulfillment constraint is satisfied when executing the processing operations or the network communication for retrieving the data responsive to each data subject access request in the set of data subject access requests from the plurality of data storage systems in the second data network.

10 . The system of claim 9 , wherein each fulfillment constraint comprises at least one of a processing deadline constraint or an identity verification constraint.

11 . The system of claim 8 , wherein the metadata comprises at least one of a type of each data subject access request in the set of data subject access requests, a location of each respective computing device from which the set of data subject access requests was received, or a respective status of each data subject identified by each data subject access request in the set of data subject access requests.

12 . The system of claim 8 , wherein prioritizing the set of data subject access requests is based on computing resources available on the second data network.

13 . The system of claim 12 , wherein executing the processing operations or the network communication for retrieving the data responsive to each data subject access request in the set of data subject access requests from the plurality of data storage systems in the second data network comprises timing an execution of the processing operations or the network communication based on the computing resources available on the second data network.

14 . The system of claim 8 , wherein the operations further comprise:

generating a graphical user interface and configuring the graphical user interface to include a display element that includes an indication of a fulfillment prioritization for the set of data subject access requests; and

providing the graphical user interface for display on a computing device.

15 . A method comprising:

receiving, by computing hardware, a data subject access request from a requestor;

verifying an identity of the requestor;

in response to receiving the data subject access request and verifying the identity of the requestor, obtaining, by the computing hardware, metadata regarding a data subject of the data subject access request;

in response to determining that the data subject access request should be prioritized based on the metadata, prioritizing, by the computing hardware, the data subject access request; and

facilitating, by the computing hardware, execution of processing operations or network communication for retrieving data responsive to the data subject access request from a plurality of data storage systems.

16 . The method of claim 15 , wherein the metadata comprises at least one of a type of the data subject access request, a location of a computing device from which the data subject access request was received, or a status of the data subject.

17 . The method of claim 15 , further comprising:

identifying, by the computing hardware based on the metadata, a processing deadline constraint for the data subject access request; and

wherein facilitating the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request occurs in a manner that satisfies the processing deadline constraint.

18 . The method of claim 15 , further comprising:

identifying, by the computing hardware based on the metadata, an identity verification constraint for processing the data subject access request;

determining, by the computing hardware based on identifying information associated with the data subject, whether the data subject access request satisfies the identity verification constraint; and

wherein facilitating the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request occurs in response to determining that the data subject access request satisfies the identify verification constraint.

19 . The method of claim 15 , wherein prioritizing the data subject access request comprises facilitating modification of a timing of the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request relative to second processing operations or a second network communication for retrieving a second data response to a second data subject access request.

20 . The method of claim 15 , further comprising:

generating, by the computing hardware, a graphical user interface and configuring the graphical user interface to include a display element that includes an indication of a priority adjustment to the data subject access request; and

providing, by the computing hardware, the graphical user interface for display on a computing device.

Assignments (1)

Continuity (19)

References Cited (400)