Automated data processing systems and methods for automatically processing data subject access requests using a chatbot
A chat robot may be used to facilitate interaction with a user in the determination of whether to initiate and process a data subject access request (DSAR). At a DSAR submission webpage, the chatbot may interact with a user to determine the information the user is in need of and/or the actions that the user may take. The chatbot may provide the information desired by the user, avoiding the processing overhead of submission and fulfillment of a DSAR. The chatbot may also facilitate completion of a DSAR on behalf of the user when needed.
1. A computer-implemented data processing method for automatically processing inquiries regarding how an entity handles personal data, the method comprising:
providing a chatbot executed by one or more computer processors, wherein the chatbot is configured for automatically processing one or more inquiries from one or more users regarding personal data that a particular entity handles for a data subject who has a specified type of relationship with a particular entity;
receiving, by one or more computer processors via a chatbot interaction window, data subject information associated with the data subject from a user;
determining, by one or more computer processors based at least in part on the data subject information, personal data information associated with the data subject;
presenting, by one or more computer processors via the chatbot interaction window, the personal data information;
receiving, by one or more computer processors via the chatbot interaction window, a request to process a data subject access request (DSAR), the DSAR comprising a request to modify one or more pieces of personal data of the data subject;
receiving, by one or more computer processors via the chatbot interaction window, detailed data subject information from the user;
automatically processing, by one or more computer processors based at least in part on the detailed data subject information, the DSAR by:
determining, based at least in part on the data subject information, a storage node associated with the personal data of the data subject;
transmitting the DSAR to the storage node; and
processing the DSAR at the storage node by:
identifying the one or more pieces of personal data of the data subject using a data model associated with the storage node; and
based at least in part on identifying the one or more pieces of personal data of the data subject using the data model, modifying the one or more pieces of personal data of the data subject at the storage node; and
presenting, by one or more computer processors via the chatbot interaction window, an indication of completion of the request to modify the one or more pieces of personal data of the data subject.
2. The computer-implemented data processing method of claim 1 , wherein determining, based at least in part on the data subject information, the personal data information associated with the data subject comprises determining a type of personal data that the particular entity stores for the data subject.
3. The computer-implemented data processing method of claim 1 , wherein receiving the data subject information associated with the data subject comprises receiving an indication of a relationship of the data subject with the particular entity.
4. The computer-implemented data processing method of claim 3 , wherein the relationship of the data subject with the particular entity comprises at least one relationship selected from a group consisting of:
(a) the data subject is a customer of the particular entity;
(b) the data subject is on one or more mailing lists of the particular entity; and
(c) the data subject uses one or more products or services of the particular entity.
5. The computer-implemented data processing method of claim 1 , wherein determining, by one or more computer processors based at least in part on the data subject information, the personal data information associated with the data subject comprises determining, by one or more computer processors based at least in part on the data subject information, one or more ways that the particular entity uses the personal data that the particular entity handles for the data subject.
6. The computer-implemented data processing method of claim 1 , wherein determining, by one or more computer processors based at least in part on the data subject information, the personal data information associated with the data subject comprises determining, by one or more computer processors based at least in part on the data subject information, a length of time that the particular entity stores the personal data that the particular entity handles for the data subject.
7. The computer-implemented data processing method of claim 1 , further comprising receiving, by one or more computer processors via the chatbot interaction window, an inquiry comprises at least one question regarding a process for submitting the DSAR to the particular entity.