Detecting violations of data policies via dynamic classification of digital data objects

Patent metadata

Field	Value
Publication number	US-12506785-B2
Application number	US-202318485015-A
Country	US
Kind code	B2
Filing date	Oct 11, 2023
Priority date	Oct 11, 2023
Publication date	Dec 23, 2025
Grant date	Dec 23, 2025

Abstract

Methods, systems, and non-transitory computer readable storage media are disclosed for managing computing systems to classify and modify digital content items to satisfy digital data requirements of data policies. For example, the content classification system validates, enforces, and remediates digital data content corresponding to digital data requirements of a data policy based on data types covered by the data policy. The disclosed systems generate classifications for digital content items by accessing digital content items and generating mappings between the digital content items and a data policy. The disclosed systems utilize the mappings and digital data requirements of the data policy to determine whether the digital content items violate one or more elements of the data policy. The disclosed systems can perform various downstream operations to remediate the data policy violations, such as by causing various computing devices to modify the violating digital content items.

First claim

What is claimed is:

1 . A method comprising:
accessing, by processing hardware via an integration with a third-party computing system, a plurality of digital content items comprising a plurality of data elements; generating, by the processing hardware utilizing a classifier model, a classification of a digital content item of the plurality of digital content items based on data elements of the digital content item; generating, by the processing hardware, a mapping between the digital content item and a data policy based on the classification of the digital content item; determining, by the processing hardware and based on the mapping and attributes of the digital content item, that the digital content item violates the data policy according to one or more digital data requirements of the data policy; and causing, by the processing hardware, one or more computing devices to modify the digital content item according to the one or more digital data requirements of the data policy.

2 . The method of claim 1 , further comprising:
determining data object cluster members comprising mappings of a subset of digital content items of the plurality of digital content items, the subset of digital content items comprising data elements that meet a similarity threshold; generating a data object cluster comprising the data object cluster members; and mapping the digital content item to the data object cluster according to the classification of the digital content item.

3 . The method of claim 2 , further comprising:
generating, by the processing hardware utilizing the classifier model, a classification of an additional digital content item of the plurality of digital content items based on data elements of the additional digital content item; and mapping the additional digital content item to the data object cluster according to the classification of the additional digital content item.

4 . The method of claim 3 , further comprising:
determining, by the processing hardware and based on attributes of the data object cluster, that the digital content item violates the data policy according to the one or more digital data requirements of the data policy; and causing, by the processing hardware, the one or more computing devices to modify the digital content item and the additional digital content item according to the one or more digital data requirements of the data policy.

5 . The method of claim 3 , further comprising:
comparing, in response to the digital content item and the additional digital content item mapping to the data object cluster, the attributes of the digital content item and the attributes of the additional digital content item to a threshold indicated by the one or more digital data requirements; determining that the attributes of the digital content item meet the threshold indicated by the one or more digital data requirements; determining that the attributes of the additional digital content item do not meet the threshold indicated by the one or more digital data requirements; and causing the one or more computing devices to modify the digital content item in response to the attributes of the digital content item meeting the threshold indicated by the one or more digital data requirements.

6 . The method of claim 1 , further comprising:
determining a classification hierarchy comprising a plurality of levels; generating the classification of the digital content item comprising a first level of the classification hierarchy; and generating an additional classification of the digital content item comprising a second level of the classification hierarchy that is above the first level of the classification hierarchy in the classification hierarchy.

7 . The method of claim 1 , further comprising generating, by the processing hardware for display via a graphical user interface of a computing device associated with the third-party computing system, an indication of the modified digital content item.

8 . The method of claim 1 , further comprising verifying, by the processing hardware, that the data elements of the modified digital content item do not meet a threshold indicated by the one or more digital data requirements of the data policy.

9 . The method of claim 1 , wherein causing the one or more computing devices to modify the digital content item comprises causing the one or more computing devices to remove the digital content item from the third-party computing system.

10 . The method of claim 1 , further comprising:
comparing, in response to the classification of the digital content item, the attributes of the digital content item to a threshold indicated by the one or more digital data requirements; determining that the attributes of the digital content item meet the threshold indicated by the one or more digital data requirements; and causing the one or more computing devices to modify the digital content item in response to the attributes of the digital content item meeting the threshold indicated by the one or more digital data requirements.

11 . A system comprising:
one or more non-transitory computer readable media comprising a digital data repository; and at least one computer processor configured to cause the system to: access, by integration with a third-party computing system, a plurality of digital content items comprising a plurality of data elements; generate a classification of a digital content item of the plurality of digital content items based on data elements of the digital content item; generate a mapping between the digital content item and a data policy based on the classification of the digital content item; determine, based on the mapping and attributes of the digital content item, that the digital content item meets a threshold indicated by one or more digital data requirements of the data policy; generate a request for one or more computing devices to modify the digital content item according to the one or more digital data requirements of the data policy; and determine the digital content item was modified by the one or more computing devices according to the one or more digital data requirements of the data policy.

12 . The system of claim 11 , wherein the at least one computer processor is further configured to cause the system to:
determine a subset of digital content items comprising data elements that meet a similarity threshold; generate a data object cluster comprising mappings of the subset of digital content items to the data policy; and map the digital content item to the data object cluster based on the classification of the digital content item.

13 . The system of claim 12 , wherein the at least one computer processor is further configured to cause the system to:
generate, utilizing a classifier model, a classification of an additional digital content item of the plurality of digital content items based on data elements of the additional digital content item; and map the additional digital content item to the data object cluster according to the classification of the additional digital content item.

14 . The system of claim 13 , wherein the at least one computer processor is further configured to cause the system to:
determine, by monitoring attributes of the subset of digital content items in the data object cluster, that the digital content item and the additional digital content item violate the data policy according to the one or more digital data requirements of the data policy; and cause the one or more computing devices to modify the digital content item and the additional digital content item according to the one or

Assignees

• Onetrust Llc

Inventors

• Wiggins Shane
• Ghosal Aniruddha
• Kumar Akshay
• Chandramohan Sivanandame
• Jones Kevin

Classifications

• G06F16/285 Primary

  Clustering or classification · CPC title

• G06F16/906

  Clustering; Classification · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title