Compliance tracking and remediation across a data sharing platform
A system, method, and computer-readable media for compliance tracking and remediation across a data sharing platform is provided. One method includes enabling a security tool and monitoring, via the security tool using at least one API, a website of an experience provider accessed by one or more user devices. Further the method includes detecting, via the security tool, a noncompliance event based on content accessed by the one or more user devices and served by the experience provider that is noncompliant with at least one data sharing preference and providing, using the at least one API, a pop-up on a graphical user interface (GUI) of a client application. Further the method includes receiving a remediation selection and remediating, via the security tool using the at least one API, the detected noncompliance event according to the remediation selection based on executing an API call.
1. A method comprising:
enabling, by a computing system, a security tool;
monitoring, by the computing system via the security tool using at least one API, a website of an experience provider accessed by one or more user devices;
detecting, by the computing system and via the security tool, a noncompliance event based on content accessed by the one or more user devices and served by the experience provider that is noncompliant with at least one data sharing preference of the one or more user devices;
in response to detecting the noncompliance event, providing, by the computing system using the at least one API, a pop-up on a graphical user interface (GUI) of a client application, wherein the pop-up comprises at least one selectable points structured to receive at least one input of the one or more user devices responsive to at least one option associated with the detected noncompliance event;
receiving, by the computing system responsive to the at least one option using the at least one API, a remediation selection; and
remediating, by the computing system and via the security tool using the at least one API, the detected noncompliance event according to the remediation selection based on executing an API call with the experience provider.
2. The method of claim 1 , wherein the security tool is packaged with the client application, and wherein monitoring comprises determining categorical information of source code of the experience provider based on analyzing the source code in a sandboxed environment of a platform provider.
3. The method of claim 1 , wherein the security tool is provided to the one or more user devices as a download prompt, the download prompt configured to download a standalone application or a web browser extension, and wherein the at least one data sharing preference of the one or more user devices comprises rules regarding how user data is utilized or shared by the experience provider.
4. The method of claim 1 , wherein the security tool includes a virtual private network (VPN) application, the VPN application configured to route network communications of the one or more user devices to a platform provider.
5. The method of claim 4 , wherein the security tool executes scripts and source code contained in the routed network communications of the one or more user devices in a sandbox environment of the platform provider.
6. The method of claim 1 , wherein the at least one data sharing preference of the one or more user devices comprises a willingness to view advertisements from designated advertising categories, and wherein the noncompliance event comprises an advertisement served by the experience provider that does not comport with the designated advertising categories that the one or more user devices is willing to view.
7. The method of claim 1 , the method comprising:
generating, by the computing system, an alert for the one or more user devices, the alert structured to provide at least one remediation protocol suggestion;
transmitting, by the computing system, the alert to the one or more user devices; and
receiving, by the computing system, a selection from the one or more user devices, the selection designating a remediation protocol from the at least one remediation protocol suggestion.
8. The method of claim 1 , wherein the at least one option comprises a first option to warn the experience provider via the API call of the computing system and a second option to disconnect from a different computing system that is serving the content associated with the noncompliance event and that is associated with the experience provider.
9. The method of claim 1 , wherein remediating the noncompliance event comprises a punitive measure levied against the experience provider by a platform provider.
10. The method of claim 9 , wherein the punitive measure comprises at least one of a financial penalty, a service-access penalty, and a regulatory penalty.
11. A system, the system comprising:
a processing circuit having at least one processor coupled to at least one memory storing instructions that, when executed by the at least one processor, cause the processing circuit to:
enable a security tool;
monitor, via the security tool using at least one API, a website of an experience provider accessed by one or more user devices;
detect, via the security tool, a noncompliance event based on content accessed by the one or more user devices and served by the experience provider that is noncompliant with at least one data sharing preference of the one or more user devices;
in response to detecting the noncompliance event, provide, using the at least one API, a pop-up on a graphical user interface (GUI) of a client application, wherein the pop-up comprises at least one selectable points structured to receive at least one input of the one or more user devices responsive to at least one option associated with the detected noncompliance event;
receive, responsive to the at least one option using the at least one API, a remediation selection; and
remediate, via the security tool using the at least one API, the detected noncompliance event according to the remediation selection based on executing an API call with the experience provider.
12. The system of claim 11 , wherein the security tool is packaged with the client application, and wherein monitoring comprises determining categorical information of source code of the experience provider based on analyzing the source code in a sandboxed environment of a platform provider.
13. The system of claim 11 , wherein the security tool is provided to the one or more user devices as a download prompt, the download prompt configured to download a standalone application or a web browser extension, and wherein the at least one data sharing preference of the one or more user devices comprises rules regarding how user data is utilized or shared by the experience provider.
14. The system of claim 11 , wherein the security tool includes a virtual private network (VPN) application, the VPN application configured to route network communications of the one or more user devices to a platform provider.
15. The system of claim 14 , wherein the security tool executes scripts and source code contained in the routed network communications of the one or more user devices in a sandbox environment of the platform provider.
16. The system of claim 11 , wherein the at least one data sharing preference of the one or more user devices comprises a willingness to view advertisements from designated advertising categories, and wherein the noncompliance event comprises an advertisement served by the experience provider that does not comport with the designated advertising categories that the one or more user devices is willing to view.
17. The system of claim 11 , the instructions that, when executed by the at least one processor, cause the processing circuit to:
generate an alert for the one or more user devices, the alert structured to provide at least one remediation protocol suggestion;
transmit the alert to the one or more user devices; and
receive a selection from the one or more user devices, the selection designating a remediation protocol from the at least one remediation protocol suggestion.
18. The system of claim 11 , wherein the at least one option comprises a first option to warn the experience provider via the API call of the system and a second option to disconnect from a computing system that is serving the content associated with the noncompliance event and that is associated with the experience provider.
19. The system of claim 11 , wherein remediating the noncompliance event comprises a punitive measure levied against the experience provider by a platform provider, and wherein the punitive measure comprises at least one of a financial penalty, a service-access penalty, and a regulatory penalty.
20. A non-transitory computer-readable medium having computer-executable instructions embodied therein that, when executed by a server system, causes the server system to perform operations comprising:
enable a security tool;
monitor, via the security tool using at least one API, a website of an experience provider accessed by one or more user devices;
detect, via the security tool, a noncompliance event based on content accessed by the one or more user devices and served by the experience provider that is noncompliant with at least one data sharing preference of the one or more user devices;
in response to detecting the noncompliance event, provide, using the at least one API, a pop-up on a graphical user interface (GUI) of a client application, wherein the pop-up comprises at least one selectable points structured to receive at least one input of the one or more user devices responsive to at least one option associated with the detected noncompliance event;
receive, responsive to the at least one option using the at least one API, a remediation selection; and
remediate, via the security tool using the at least one API, the detected noncompliance event according to the remediation selection based on executing an API call with the experience provider.