Data processing systems and methods for customizing privacy training

Patent metadata

Field	Value
Publication number	US-11301796-B2
Application number	US-202117397472-A
Country	US
Kind code	B2
Filing date	Aug 9, 2021
Priority date	Jun 10, 2016
Publication date	Apr 12, 2022
Grant date	Apr 12, 2022

Abstract

Data processing systems and methods, according to various embodiments, are adapted for performing a process of procuring a vendor and sub-processes associated therewith, such as performing vendor risk assessments and providing training specific to the procurement of that particular vendor. Training requirements for the user procuring the vendor and/or for the vendor itself are determined and any deficiencies in current, valid training requirements are identified. Training to address any identified deficiencies is provided as part of the vendor procurement process. Training may be customized based on trainee and/or organization attributes to improve the effectiveness of such training.

First claim

What is claimed is:

1. A system comprising:
a non-transitory computer-readable medium storing instructions; and
processing hardware communicatively coupled to the non-transitory computer-readable medium, wherein the processing hardware is configured to execute the instructions and thereby perform operations comprising:
detecting a request to generate customized privacy training content, the request comprising a topic parameter indicating a privacy topic;
in response to detecting the request, generating the customized privacy training content by:
determining contextual information based on the request;
determining privacy training content associated with the privacy topic based on the topic parameter;
generating supplemental training content based on the contextual information and the privacy training content;
generating the customized privacy training content by supplementing the privacy training content with the supplemental training content; and
generating a graphical user interface by configuring a presentation element configured for presenting the customized privacy training content on the graphical user interface; and

transmitting an instruction to a browser application executed on a user device causing the browser application to retrieve the customized privacy training content and present the graphical user interface on the user device, wherein:
the operations further comprise determining a portion of the privacy training content for removal based on the contextual information and the privacy training content;
generating the customized privacy training content comprises removing the portion of the privacy training content from the privacy training content;
detecting the request comprises detecting browser state information in the browser application;
determining the contextual information based on the request comprises determining a geographical location based on the browser state information; and
retrieving the supplemental training content based on the contextual information comprises retrieving the supplemental training content based on the geographical location.

2. The system of claim 1 , wherein:
the request further comprises a trainee parameter; and
determining the contextual information based on the request comprises determining the contextual information based on the trainee parameter.

3. The system of claim 2 , wherein determining the contextual information based on the trainee parameter comprises:
determining a data map associated with the trainee based on the trainee parameter; and
determining the contextual information using the data map.

4. The system of claim 2 , wherein:
the operations further comprise determining a data asset based on the trainee parameter; and
determining the contextual information based on the trainee parameter comprises determining the contextual information based on the data asset.

5. The system of claim 4 , wherein the contextual information comprises one or more of a geographical location of the data asset, a jurisdiction associated with the data asset, a type of data processed by the data asset, or a type of the data asset.

6. The system of claim 1 , wherein:
generating the supplemental training content based on the contextual information and the privacy training content comprises generating the supplemental training content based on the geographical location.

7. A method comprising:
detecting, by computing hardware, a request to generate customized privacy training content, the request comprising a privacy topic parameter;
in response to detecting the request, generating, by the computing hardware, the customized privacy training content by:
determining contextual information based on the request;
determining privacy training content based on the privacy topic parameter;
generating supplemental training content based on the contextual information and the privacy training content;
generating the customized privacy training content by supplementing the privacy training content with the supplemental training content; and
generating a graphical user interface by configuring a presentation element configured for presenting the customized privacy training content on the graphical user interface; and

transmitting, by the computing hardware, an instruction to a user device to retrieve the customized privacy training content and present the graphical user interface on the user device, wherein:
the method further comprises determining, by the computing hardware, a portion of the privacy training content for removal based on the contextual information and the privacy training content;
generating the customized privacy training content comprises removing the portion of the privacy training content from the privacy training content;
detecting the request comprises detecting browser state information of a browser application;
determining the contextual information based on the request comprises determining a geographical location based on the browser state information; and
retrieving the supplemental training content based on the contextual information comprises retrieving the supplemental training content based on the geographical location.

8. The method of claim 7 , wherein:
the request further comprises a context parameter;
the context parameter comprises an indication of a set of privacy requirements; and
generating the supplemental training content based on the contextual information and the privacy training content comprises generating the supplemental training content comprising training material associated with the set of privacy requirements.

9. The method of claim 7 , wherein the supplemental training content comprises one or more of video content or audio content.

10. The method of claim 7 , wherein:
the request further comprises a context parameter;
the context parameter comprises an indication of a trainee; and
generating the supplemental training content based on the contextual information and the privacy training content comprises:
determining a supervisor of the trainee, and
generating the supplemental training content using one or more of an image of the supervisor, video content comprising an image of the supervisor, or audio content comprising audio of the supervisor.

11. The method of claim 7 , wherein:
the request further comprises a context parameter;
the context parameter comprises an indication of a vendor; and
generating the supplemental training content based on the contextual information and the privacy training content comprises generating the supplemental training content using an image associated with the vendor.

12. The method of claim 7 , wherein:
the request further comprises a context parameter;
the operations further comprise:
determining a data map for a data asset based on the context parameter, and
determining a jurisdiction associated with the data asset using the data map;

determining the contextual information based on the context parameter comprises determining the contextual information based on the jurisdiction; and
generating the supplemental training content based on the contextual information and the privacy training content comprises generating the supplemental training content based on the jurisdiction.

13. The method of claim 7 , wherein:
the request further comprises a context parameter;
the operations further comprise:
determining a data map for a data asset based on the context parameter, and
determining a type of data associated with the data asset using the data map;

determining the contextual information based on the context parameter comprises determining the contextual inf

Assignees

• Onetrust Llc

Inventors

• Clearwater Andrew
• Barday Kabir A
• Brannon Jonathan Blake
• Walk Hannah Rose

Classifications

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06Q10/0635 Primary

  Risk analysis of enterprise or organisation activities · CPC title

• G06Q30/018

  Certifying business or products · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F15/76

  Architectures of general purpose stored program computers (with program plugboard G06F15/08; multicomputers G06F15/16) · CPC title