Data processing systems and methods for synching privacy-related user consent across multiple computing devices

Patent metadata

Field	Value
Publication number	US-11727141-B2
Application number	US-202117200698-A
Country	US
Kind code	B2
Filing date	Mar 12, 2021
Priority date	Jun 10, 2016
Publication date	Aug 15, 2023
Grant date	Aug 15, 2023

Abstract

A privacy-related consent extension and data processing system may be configured to automatically extend one or more privacy-related consents for a user of a first computing device to a second computing device. In various embodiments, the system is configured to provide a computer-readable indicium(indicia) on a previously unknown computing device upon initiation of a transaction between a user and an entity collecting and processing privacy data. In response to a user using a known computing device to scan the computer-readable indicium, in various embodiments, the system may provide the ability to share user consent data provided by the first known device to the second unknown device, allowing the user to provide consent without manually re-entering privacy and consent preferences.

First claim

What is claimed:

1. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium, wherein the processing device is configured to execute the instructions and thereby perform operations comprising:
receiving, via a first computing device being used to access a particular service, privacy-related user consent preferences for the particular service to process personal data on the first computing device;
storing the privacy-related user consent preferences in a memory;
causing a computer-readable indicium to display via a second computing device, wherein the computer-readable indicium comprises:
an indication of a session request; and
navigation instructions to navigate to a consent interface of the particular service;

receiving, via the first computing device, an authentication of the computer-readable indicium, the authentication comprising the session request, and the first computing device following the navigation instructions;
retrieving, from the memory, the privacy-related user consent preferences;
causing display of the consent interface on the first computing device, wherein the consent interface comprises:
the privacy-related user consent preferences retrieved from the memory; and
a selectable mechanism to apply the privacy-related user consent preferences to the second computing device; and

in response to receiving an indication of a selection of the selectable mechanism:
transmitting the privacy-related user consent preferences to the second computing device to prevent display of the consent interface on the second computing device; and
storing the privacy-related user consent preferences on the second computing device so that the privacy-related user consent preferences are applied with respect to the particular service processing the personal data on the second computing device.

2. The system of claim 1 , wherein the operations further comprise, before transmitting the privacy-related user consent preferences to the second computing device, confirming an identity of a user of the second computing device via the first computing device.

3. The system of claim 1 , wherein the computer-readable indicium is a bar code that, when scanned, is configured to provide the navigation instructions as a uniform resource locator associated with the session of the particular service to facilitate causing the first computing device to navigate to the consent interface.

4. The system of claim 1 , wherein the computer-readable indicium, when scanned by the first computing device, is configured to facilitate automatically tying the session on the second computing device with a particular data subject.

5. The system of claim 4 , wherein the operations further comprise, in response to scanning the computer-readable indicium using the first computing device, communicating a user profile associated with the particular data subject to the second computing device.

6. The system of claim 1 , wherein the operations further comprise:
facilitating application of the privacy-related user consent preferences to the session of the particular service being performed on the second computing device.

7. A system comprising:
a non-transitory computer-readable medium storing instructions; and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
receiving, via a first computing device, privacy-related consent preferences for a particular service associated with the system so that the particular service can process personal data on the first computing device;
storing the privacy-related consent preferences in a memory;
receiving a code identifying a session request for the particular service from the first computing device, wherein:
(i) the first computing device obtains the code from a second computing device that is requesting to begin a session of the particular service on the second computing device;
(ii) the second computing device provides navigation instructions for the first computing device to navigate to the particular service; and
(iii) the first computing device, as a result of receiving the code, navigates to the particular service and provides the code; and

in response to receiving the code:
retrieving, from the memory, the privacy-related consent preferences;
causing, based on the code, display of the privacy-related consent preferences via a consent interface within the particular service on the first computing device;
receiving a request originating from the consent interface to extend the privacy-related consent preferences to the second computing device; and
in response to receiving the request, automatically facilitating an extension of the privacy-related consent preferences to cover the particular service processing the personal data on the second computing device by:
transmitting the privacy-related user consent preferences to the second computing device to prevent display of the consent interface on the second computing device; and
storing the privacy-related user consent preferences on the second computing device.

8. The system of claim 7 , wherein the code is obtained by the first computing device scanning a computer-readable indicium displayed on a user interface associated with the second computing device.

9. The system of claim 7 , wherein the first computing device obtains the code from the second computing device via wireless transmission.

10. The system of claim 9 , wherein the wireless transmission comprises at least one of a transmission via Bluetooth wireless technology standard or transmission via near field communication protocols.

11. The system of claim 7 , wherein the code is an alphanumeric code.

12. A method comprising:
receiving, from a user via a second computing device, a request to initiate a service involving an entity and the user, the second computing device not being associated with privacy-related consent data related to the service;
at least partially in response to receiving the request, providing a computer-readable indicium for display on a consent extension interface on the second computing device;
receiving, by computing hardware from the service initiated on a first computing device, authentication of the computer-readable indicium identifying the request, wherein the first computing device is navigated to the service as a result of scanning the computer-readable indicium using the first computing device and the first computing device is associated with the privacy-related consent data to process personal data for the user; and
at least partially in response to receiving the authentication:
retrieving, from a memory, privacy-related user consent preferences;
providing, by the computing hardware associated with the service and based on the authentication, a consent interface for display within the service on the first computing device, wherein the consent interface comprises a privacy information section comprising privacy and consent information regarding the personal data, the privacy-related user consent preferences, a plurality of privacy consent options, and a save selector configured to submit the privacy-related consent data upon selection by the user;
receiving, by the computing hardware associated with the service, an indication of a selection of the save selector; and
in response to receiving the indication, associating, by the computing hardware associated with the service, the second computing device with the privacy

Assignees

• Onetrust Llc

Inventors

• Brannon Jonathan Blake
• Whitney Patrick
• Cash Alex
• Wyckoff Spencer
• Hanson Stephanie
• Doshi Pratik

Classifications

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F11/3065

  Monitoring arrangements determined by the means or processing involved in reporting the monitored data (error or fault reporting or logging G06F11/0766) · CPC title

• G06F11/34

  Recording or statistical evaluation of computer activity, e.g. of down time, of input/output operation {; Recording or statistical evaluation of user activity, e.g. usability assessment} · CPC title

• G06F11/3447

  Performance evaluation by modeling · CPC title