Data processing systems for fulfilling data subject access requests and related methods

Patent metadata

Field	Value
Publication number	US-12591828-B2
Application number	US-202318117190-A
Country	US
Kind code	B2
Filing date	Mar 3, 2023
Priority date	Jun 10, 2016
Publication date	Mar 31, 2026
Grant date	Mar 31, 2026

Abstract

Various Data Subject Access Request (DSAR) processing systems are adapted for presenting a first webform on a first web site, the first webform being adapted to receive DSAR's and to route the requests to a first designated individual for processing; presenting a second webform on a second web site, the second webform being adapted to receive DSAR's and to route the requests to a second designated individual for processing; receiving, via the first webform, a first DSAR; at least partially in response to the receiving the first DSAR, automatically routing the first DSAR to the first designated individual for handling; receiving, via the second webform, a second DSAR; at least partially in response to the receiving the second DSAR, automatically routing the second DSAR to the second designated individual for handling; and communicating a status of both the first DSAR and the second DSAR via a single user interface.

First claim

What is claimed is:

1 . A method comprising:
providing, by computing hardware, an interface that is accessible via a first data network and is configured for searching a plurality of data storage systems included in a second data network; receiving, by the computing hardware via the interface and the first data network, a data subject access request from a requestor; verifying, by the computing hardware, an identity of the requestor; responsive to receiving the data subject access request and verifying the identity, obtaining, by the computing hardware, metadata regarding at least one of a data subject identified by the data subject access request or the data subject access request; responsive to determining that the data subject access request should be prioritized based on the metadata, prioritizing by the computing hardware, the data subject access request; and facilitating, by the computing hardware, execution of processing operations or network communication for retrieving data responsive to the data subject access request from the plurality of data storage systems in the second data network.

2 . The method of claim 1 , the method further comprising:
identifying, by the computing hardware based on the metadata, a processing deadline constraint for the data subject access request; and wherein facilitating the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request occurs in a manner that satisfies the processing deadline constraint.

3 . The method of claim 1 , wherein the metadata comprises at least one of a type of the data subject access request, a location of a computing device from which the data subject access request was received, or a status of the data subject.

4 . The method of claim 1 , wherein prioritizing the data subject access request comprises facilitating modification of a timing of the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request.

5 . The method of claim 1 , wherein determining that the data subject access request should be prioritized based on the metadata is further based on computing resources available on the second data network.

6 . The method of claim 1 , further comprising:
identifying, by the computing hardware based on the metadata, an identity verification constraint for processing the data subject access request; determining, by the computing hardware based on identifying information associated with the data subject, whether the data subject access request satisfies the identity verification constraint; and wherein facilitating the execution of the processing operations or the network communication for retrieving the data responsive to the data subject access request occurs in response to determining that the data subject access request satisfies the identify verification constraint.

7 . The method of claim 1 , further comprising:
generating, by the computing hardware, a graphical user interface and configuring the graphical user interface to include a display element that includes an indication of a priority adjustment to the data subject access request; and providing, by the computing hardware, the graphical user interface for display on a computing device.

8 . A system comprising:
a non-transitory computer-readable medium storing instructions; and a processing device communicatively coupled to the non-transitory computer-readable medium, wherein, the processing device is configured to execute the instructions and thereby perform operations comprising:
providing an interface that is accessible via a first data network and is configured for searching a plurality of data storage systems included in a second data network;
receiving, via the interface and the first data network, a set of data subject access requests from a requestor;
verifying an identity of the requestor;
obtaining metadata for each data subject access request in the set of data subject access requests;
prioritizing, based on the metadata, the set of data subject access requests; and
executing processing operations or network communication for retrieving data responsive to each data subject access request in the set of data subject access requests from the plurality of data storage systems in the second data network.

9 . The system of claim 8 , wherein:
the operations further comprise identifying, for each data subject access request in the set of data subject access requests, a respective fulfillment constraint; and prioritizing the set of data subject access requests comprises prioritizing such that the respective fulfillment constraint is satisfied when executing the processing operations or the network communication for retrieving the data responsive to each data subject access request in the set of data subject access requests from the plurality of data storage systems in the second data network.

10 . The system of claim 9 , wherein each fulfillment constraint comprises at least one of a processing deadline constraint or an identity verification constraint.

11 . The system of claim 8 , wherein the metadata comprises at least one of a type of each data subject access request in the set of data subject access requests, a location of each respective computing device from which the set of data subject access requests was received, or a respective status of each data subject identified by each data subject access request in the set of data subject access requests.

12 . The system of claim 8 , wherein prioritizing the set of data subject access requests is based on computing resources available on the second data network.

13 . The system of claim 12 , wherein executing the processing operations or the network communication for retrieving the data responsive to each data subject access request in the set of data subject access requests from the plurality of data storage systems in the second data network comprises timing an execution of the processing operations or the network communication based on the computing resources available on the second data network.

14 . The system of claim 8 , wherein the operations further comprise:
generating a graphical user interface and configuring the graphical user interface to include a display element that includes an indication of a fulfillment prioritization for the set of data subject access requests; and providing the graphical user interface for display on a computing device.

15 . A method comprising:
receiving, by computing hardware, a data subject access request from a requestor; verifying an identity of the requestor; in response to receiving the data subject access request and verifying the identity of the requestor, obtaining, by the computing hardware, metadata regarding a data subject of the data subject access request; in response to determining that the data subject access request should be prioritized based on the metadata, prioritizing, by the computing hardware, the data subject access request; and facilitating, by the computing hardware, execution of processing operations or network communication for retrieving data responsive to the data subject access request from a plurality of data storage systems.

16 . The method of claim 15 , wherein the metadata comprises at least one of a type of the data subject access request, a location of a computing device from which the data subject access request was received, or a status of the data subject.

17 . The method of claim 15 , further compri

Assignees

• Onetrust Llc

Inventors

• Barday Kabir A
• Sabourin Jason L
• Brannon Jonathan Blake
• Karanjkar Mihir S
• Jones Kevin

Classifications

• G06F15/76

  Architectures of general purpose stored program computers (with program plugboard G06F15/08; multicomputers G06F15/16) · CPC title

• G06F21/552 Primary

  involving long-term monitoring or reporting · CPC title

• G06F21/577

  Assessing vulnerabilities and evaluating computer system security · CPC title

• G06F16/95

  Retrieval from the web · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title