Granted Patent B2

US 11,868,507 · App. 18/096,935 · Granted Jan 9, 2024

Inventors: Jonathan Blake Brannon (Smyrna, GA); Raju Bokade (Atlanta, GA); Austin Proctor (Atlanta, GA); Mithun Babu (Atlanta, GA); Madhusudhan Kunhambu (Bangalore, IN)

Assignee: OneTrust, LLC

G06F21/6263G06F16/958G06F21/602G06F21/604

Abstract

Claims (65)

1. A method comprising:

determining, by computing hardware, a geo-location of a data subject that is performing an interaction with a website, wherein the interaction involves processing data subject information on the data subject;

determining, by the computing hardware and based on a website parameter associated with the website and the geo-location of the data subject, a data subject consent parameter, wherein:

the website parameter is based on at least one of a website category identified for the website or a website cookie associated with the website, and

the data subject consent parameter represents a consent required from the data subject to process the data subject information;

applying, by the computing hardware, the data subject consent parameter to the interaction;

determining, by the computing hardware and based on applying the data subject consent parameter to the interaction, that the data subject has not provided the consent required to process the data subject information; and

responsive to determining the data subject has not provided the consent, triggering, by the computing hardware, an application programming interface call to cease processing the data subject information.

2. The method of claim 1 further comprising:

scanning the website to identify the website cookie; and

determining a type for at least a portion of the data subject information captured by the website cookie, wherein the consent required from the data subject to process the data subject information is based on the type.

3. The method of claim 1 , wherein the data subject consent parameter is further based on a privacy law associated with the geo-location.

4. The method of claim 3 further comprising associating, by the computing hardware, the geo-location with a plurality of physical locations based on a plurality of geographic boundaries to identify the privacy law, wherein each of the plurality of physical locations is associated with a corresponding privacy law.

5. The method of claim 1 , wherein the data subject consent parameter comprises the data subject scrolling to an ending portion of a webpage of the website to provide the consent, and determining that the data subject has not provided the consent required to process the data subject information comprises:

tracking the interaction; and

determining, based on tracking the interaction, that the data subject has not scrolled to the ending portion of the webpage.

6. The method of claim 1 , wherein the data subject consent parameter comprises the data subject selecting a button provided on the website indicating the consent, and determining that the data subject has not provided the consent required to process the data subject information comprises:

tracking the interaction; and

determining, based on tracking the interaction, that the data subject has not selected the button.

7. The method of claim 1 , wherein the data subject information comprises personal data of the data subject.

8. A system comprising:

a non-transitory computer-readable medium storing instructions; and

a processing device communicatively coupled to the non-transitory computer-readable medium,

wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:

determining a geo-location of a data subject that is performing an interaction with a website, wherein the interaction involves processing data subject information on the data subject;

determining, based on a website parameter associated with the website and the geo-location of the data subject, a data subject consent parameter, wherein:

the website parameter is based on at least one of a website category identified for the website or a website cookie associated with the website, and

the data subject consent parameter represents a consent required from the data subject to process the data subject information;

applying the data subject consent parameter to the interaction;

determining, based on applying the data subject consent parameter to the interaction, that the data subject has provided the consent required to process the data subject information;

responsive to determining the data subject has not provided the consent, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

9. The system of claim 8 , wherein the operations further comprise:

scanning the website to identify the website cookie; and

determining a type for at least a portion of the data subject information captured by the website cookie, wherein the consent required from the data subject to process the data subject information is based on the type.

10. The system of claim 8 , wherein the data subject consent parameter is further based on a privacy law associated with the geo-location.

11. The system of claim 10 , wherein the operations further comprise associating the geo-location with a plurality of physical locations to identify the privacy law, in which each of the plurality of physical locations is associated with a corresponding privacy law.

12. The system of claim 8 , wherein the data subject consent parameter comprises the data subject scrolling to an ending portion of a webpage of the website to provide the consent, and determining that the data subject has provided the consent required to process the data subject information comprises:

tracking the interaction; and

determining, based on tracking the interaction, that the data subject has scrolled to the ending portion of the webpage.

13. The system of claim 8 , wherein the data subject consent parameter comprises the data subject selecting a button provided on the website indicating the consent, and determining that the data subject has provided the consent required to process the data subject information comprises:

tracking the interaction; and

determining, based on tracking the interaction, that the data subject has selected the button.

14. The system of claim 8 , wherein the data subject information comprises personal data of the data subject.

15. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by computing hardware, configure the computing hardware to perform operations comprising:

determining a geo-location of a data subject that is performing an interaction with an interaction interface, wherein the interaction involves processing data subject information on the data subject;

determining, based on an interface parameter associated with the interaction interface and the geo-location of the data subject, a data subject consent parameter, wherein:

the interface parameter is based on an interface category identified for the interaction interface, and

the data subject consent parameter represents a consent required from the data subject to process the data subject information;

applying the data subject consent parameter to the interaction;

determining, based on applying the data subject consent parameter to the interaction, that the data subject has not provided the consent required to process the data subject information; and

responsive to determining the data subject has not provided the consent:

providing, for display via the interaction interface, information regarding the consent; and

providing a prompt for the data subject to provide the consent.

16. The non-transitory computer-readable medium of claim 15 , wherein the operations further comprise:

scanning the interaction interface to identify the interface category; and

determining a type for at least a portion of the data subject information related to the interface category, wherein the consent required from the data subject to process the data subject information is based on the type.

17. The non-transitory computer-readable medium of claim 15 , wherein the data subject consent parameter is further based on a privacy law associated with the geo-location.

18. The non-transitory computer-readable medium of claim 17 , wherein the operations further comprise associating the geo-location with a plurality of physical locations based on a plurality of geographic boundaries to identify the privacy law, in which each of the plurality of physical locations is associated with a corresponding privacy law.

19. The non-transitory computer-readable medium of claim 15 , wherein the data subject consent parameter comprises the data subject scrolling to an ending portion of the interaction interface to provide the consent, and determining that the data subject has not provided the consent required to process the data subject information comprises:

tracking the interaction; and

determining, based on tracking the interaction, that the data subject has not scrolled to the ending portion of the interaction interface.

20. The non-transitory computer-readable medium of claim 15 , wherein the data subject consent parameter comprises the data subject selecting a button provided on the interaction interface indicating the consent, and determining that the data subject has not provided the consent required to process the data subject information comprises:

tracking the interaction; and

determining, based on tracking the interaction, that the data subject has not selected the button.

Assignments (1)

Continuity (25)