Data processing consent capture systems and related methods

Patent metadata

Field	Value
Publication number	US-11645353-B2
Application number	US-202217860255-A
Country	US
Kind code	B2
Filing date	Jul 8, 2022
Priority date	Jun 10, 2016
Publication date	May 9, 2023
Grant date	May 9, 2023

Abstract

In various embodiments, a data processing consent capture system may be configured to prompt the data subject to consent to one or more types of data processing (e.g., to provide a desired consent) in response to identifying particular cookies (e.g., or types of data processing) that a data subject has not consented to. The system may, for example, substantially automatically prompt the data subject to consent for one or more particular types of data processing in response to determining that the user (e.g., data subject) has requested that a website or other system perform one or more functions that are not possible without a particular type of consent from the data subject. The system may, for example, prompt the user to consent in time for a certain interaction with the website, application, etc.

First claim

We claim:

1. A method comprising:
identifying, by computing hardware, a triggering event associated with a user interacting with a piece of software, wherein the triggering event comprises at least one of a passage of time the user has interacted with the piece of software, an amount of content viewed by the user via the piece of software, a number of selections made by the user in the piece of software, a distance the user has scrolled through the piece of software, a selection of a particular function available via the piece of software, or a transaction the user is conducting via the piece of software;
responsive to identifying the triggering event;
accessing, by the computing hardware, a consent map associated with the user and the piece of software, the consent map defining:
a plurality of types of consents required from the user associated with interacting with the piece of software; and
for each respective type of consent of the plurality of types of consents, one of an indicator of provided consent by the user or an indicator of unprovided consent by the user; and

analyzing, by the computing hardware, the consent map to determine a particular type of consent having the indicator of unprovided consent by the user;

responsive to determining that the particular type of consent has the indicator of unprovided consent by the user:
generating, by the computing hardware, a consent prompt that is customized to request consent for the particular type of consent; and
providing, by the computing hardware, the consent prompt to the user;

receiving, by the computing hardware, an indication of the user providing the consent for the particular type of consent; and
modifying, by the computing hardware, the consent map to identify the particular type of consent as having the indicator of provided consent by the user.

2. The method of claim 1 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a ranking of the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

3. The method of claim 1 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a number of transactions conducted through the piece of software requiring the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

4. The method of claim 1 further comprising:
subsequent to modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user, identifying, by the computing hardware, a particular transaction available through the piece of software;
responsive to identifying the particular transaction, analyzing, by the computing hardware, the consent map to determine the particular transaction requires the particular type of consent having the indicator of provided consent by the user; and
responsive to determining that the particular type of consent has the indicator of provided consent, allowing, by the computing hardware, the particular transaction to be conducted through the piece of software.

5. The method of claim 4 , wherein the particular transaction comprises at least one of installing a cookie, installing tracking technology, or collecting personal data of the user.

6. The method of claim 1 further comprising:
subsequent to modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user, identifying, by the computing hardware, a function available through the piece of software;
responsive to identifying the function, analyzing, by the computing hardware, the consent map to determine the function requires the particular type of consent having the indicator of provided consent by the user; and
responsive to determining that the particular type of consent has the indicator of provided consent, allowing, by the computing hardware, the user to perform the function through the piece of software.

7. The method of claim 1 , wherein the piece of software comprises at least one of a webpage or a mobile application.

8. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
identifying a triggering event associated with a user interacting with a piece of software, wherein the triggering event comprises at least one of a passage of time the user has interacted with the piece of software, an amount of content viewed by the user via the piece of software, a number of selections made by the user in the piece of software, a distance the user has scrolled through the piece of software, a selection of a particular function available via the piece of software, or a transaction the user is conducting via the piece of software;
responsive to identifying the triggering event;
accessing a consent map associated with the user and the piece of software, the consent map defining:
a plurality of types of consents required from the user associated with interacting with the piece of software; and
for each respective type of consent of the plurality of types of consents, one of an indicator of provided consent by the user or an indicator of unprovided consent by the user; and

analyzing the consent map to determine a particular type of consent having the indicator of unprovided consent by the user;

responsive to determining that the particular type of consent has the indicator of unprovided consent by the user, providing a consent prompt to request consent for the particular type of consent;
receiving an indication of the user providing the consent for the particular type of consent; and
modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user.

9. The system of claim 8 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a ranking of the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

10. The system of claim 8 , wherein analyzing the consent map to determine the particular type of consent having the indicator of unprovided consent by the user comprises selecting, based on a number of transactions conducted through the piece of software requiring the particular type of consent, the particular type of consent over a second type of consent having the indicator of unprovided consent.

11. The system of claim 8 , wherein the operations further comprise:
subsequent to modifying the consent map to identify the particular type of consent as having the indicator of provided consent by the user, identifying a particular transaction available through the piece of software;
responsive to identifying the particular transaction, analyzing the consent map to determine the transaction requires the particular type of consent having the indicator of provided consent by the user; and
responsive to determining that the particular type of consent has the indicator of provided consent, allowing the particular transaction to be conducted through the piece of software.

12. The system of claim 8 , wherein the operations further comprise:
subsequent t

Assignees

• Onetrust Llc

Inventors

• Brannon Jonathan Blake
• Whitney Patrick

Classifications

• G06F16/215 Primary

  Improving data quality; Data cleansing, e.g. de-duplication, removing invalid entries or correcting typographical errors · CPC title

• G06F21/554

  involving event detection and direct action · CPC title

• G06F16/9577

  Optimising the visualization of content, e.g. distillation of HTML documents · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F16/972 Primary

  Access to data in other repository systems, e.g. legacy data or dynamic Web page generation · CPC title