Data processing user interface monitoring systems and related methods

Patent metadata

Field	Value
Publication number	US-11636171-B2
Application number	US-202217675760-A
Country	US
Kind code	B2
Filing date	Feb 18, 2022
Priority date	Jun 10, 2016
Publication date	Apr 25, 2023
Grant date	Apr 25, 2023

Abstract

In various embodiments, a system may be configured to analyze data for a particular consent capture point to identify a change in consent capture rate from the capture point. The system may, for example, be configured to automatically detect that the system has stopped receiving consent records from a particular capture point. In such embodiments, the system may be configured to generate an alert, and transmit the alert to any suitable individual (e.g., privacy team member, IT department member, etc.) regarding the capture point. The system may, for example, enable an entity to identify one or more capture points that may have become non-functional (e.g., as a result of one or more changes to the capture point).

First claim

What is claimed is:

1. A computing system comprising:
first computing hardware configured for:
monitoring consent records received from a consent capture point, wherein the consent records represent consent provided by data subjects through the consent capture point to initiate transactions with an entity associated with the consent capture point;
determining a rate at which the consent records are generated via the consent capture point;
identifying a change in the rate at which the consent records are provided via the consent capture point;
determining the change in the rate satisfies a threshold; and
responsive to determining the change in the rate satisfies the threshold, sending a communication identifying the consent capture point; and

second computing hardware communicatively coupled to the first computing hardware and configured for:
receiving the communication; and
responsive to receiving the communication, having a modified consent capture interface implemented at the consent capture point.

2. The computing system of claim 1 , wherein the threshold varies based on a characteristic of the data subjects.

3. The computing system of claim 1 , wherein the first computing hardware is further configured for:
storing frequency data for consent records received by the consent capture point; wherein:
the threshold is determined by:
querying the frequency data;
determining, based on the frequency data, an average of the rate at which the consent records are generated; and
setting the threshold based on the average.

4. The computing system of claim 1 , wherein the threshold is less than an average of the rate at which the consent records are generated.

5. The computing system of claim 1 , wherein the threshold is greater than an average of the rate at which the consent records are generated.

6. The computing system of claim 1 , wherein the transactions are associated with at least one of:
accessing a website for the entity;
signing up for a user account with the entity;
signing up for a mailing list with the entity;
a free trial sign up; or
a product registration.

7. The computing system of claim 1 , wherein the consent enables functionality required to conduct the transactions.

8. The computing system of claim 1 , wherein the first computing hardware facilitates creation of the modified consent capture interface.

9. The computing system of claim 1 , wherein the communication indicates that the computing system may be capturing data that does not have an associated consent record.

10. The computing system of claim 1 , wherein the first computing hardware is further configured for determining whether the computing system may be capturing data that does not have an associated consent record by:
determining a unique subject identifier corresponding to a data subject initiating a transaction with the entity;
running a query, using the unique subject identifier, of a storage storing records comprising unique consent receipt keys in association with respective unique subject identifiers; and
determining that the computing system is capturing data that does not have the associated consent record in response to the query returning no results.

11. The computing system of claim 1 , wherein the first computing hardware is further configured for determining a risk for one or more processing activities that are associated with the consent capture point in response to determining that the change in the rate satisfies the threshold.

12. A method comprising:
monitoring, by computing hardware, a consent receipt management system configured for managing consent records generated via a plurality of consent capture points, wherein the consent records represent consent provided by data subjects over a network through the plurality of consent capture points to initiate transactions with an entity associated with the plurality of consent capture points;
determining, by the computing hardware, a rate for each consent capture point of the plurality of consent capture points at which the consent records are generated via the consent capture point;
identifying, by the computing hardware, a change in the rate at which the consent records are provided via a particular consent capture point of the plurality of consent capture points;
determining, by the computing hardware, that the change in the rate satisfies a threshold; and
responsive to determining that the change in the rate satisfies the threshold, facilitating, by the computing hardware, modification of the particular consent capture point.

13. The method of claim 12 , wherein the plurality of consent capture points display information regarding the consent to collect personal data and prompts the data subjects to provide the consent.

14. The method of claim 12 , further comprising:
determining the threshold based on a history of the rate at which the consent records are provided via the particular consent capture point.

15. The method of claim 12 , wherein the consent enables functionality required to conduct the transactions.

16. The method of claim 15 , wherein each consent capture point of the plurality of consent capture points corresponds to a respective transaction type comprising at least one of:
accessing a web site;
signing up for a user account;
signing up for a mailing list;
signing up for a free trial; or
registering a product.

17. The method of claim 16 , further comprising:
responsive to determining the change in the rate satisfies the threshold, sending a communication identifying the consent capture point, the communication comprising the respective transaction type.

18. A non-transitory computer-readable medium storing computer-executable instructions that, when executed by processing hardware, configure the processing hardware to perform operations comprising:
monitoring a consent receipt management system configured for managing consent records generated via a plurality of consent capture points, wherein the consent records represent consent provided by data subjects over a network through the plurality of consent capture points to initiate transactions with an entity associated with the plurality of consent capture points;
determining a rate for each consent capture point of the plurality of consent capture points at which the consent records are generated via the consent capture point;
identifying a respective change in the rate for each consent capture point of the plurality of consent capture points;
determining that the respective change in the rate for a particular consent capture point of the plurality of consent capture points satisfies a threshold corresponding to the particular consent capture point; and
responsive to determining the respective change in the rate satisfies the threshold, facilitating modification of the particular consent capture point.

19. The non-transitory computer-readable medium of claim 18 , wherein the operations further comprise:
determining the threshold corresponding to the particular consent capture point based on at least one of:
a characteristic of the particular consent capture point;
a transaction type corresponding to the particular consent capture point; or
a historical consent capture rate corresponding to the particular consent capture point.

20. The non-transitory computer-readable medium of claim 19 , wherein the operations further comprise:
responsive to determining the respective change in the rate satisfies the threshold, transmitting an alert identif

Assignees

• Onetrust Llc

Inventors

• Brannon Jonathan Blake
• Hill Casey
• Jones Kevin
• Beaumont Richard A

Classifications

• G06F16/972 Primary

  Access to data in other repository systems, e.g. legacy data or dynamic Web page generation · CPC title

• G06F16/9574

  of access to content, e.g. by caching · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F40/30

  Semantic analysis · CPC title

• G06F40/174

  Form filling; Merging · CPC title