Data processing systems and methods for performing privacy assessments and monitoring of new versions of computer code for privacy compliance

Patent metadata

Field	Value
Publication number	US-9882935-B2
Application number	US-201715671073-A
Country	US
Kind code	B2
Filing date	Aug 7, 2017
Priority date	Jun 10, 2016
Publication date	Jan 30, 2018
Grant date	Jan 30, 2018

Abstract

Data processing systems and methods, according to various embodiments, perform privacy assessments and monitor new versions of computer code for updated features and conditions that relate to compliance with privacy standards. The systems and methods may obtain a copy of computer code (e.g., a software application or a website) that collects and/or uses personal data, and then automatically analyzes the computer code to identify one or more privacy-related attributes that may impact privacy assessment standards. In various embodiments, the system is adapted to monitor one or more locations (e.g., an online software application marketplace, and/or a specified website) to determine whether the application or website has changed. The system may, after analyzing the computer code, display the privacy-related attributes, collect information regarding the attributes, and automatically notify one or more designated individuals (e.g., privacy office representatives) regarding the attributes and information collected.

First claim

What is claimed is:

1. A computer-implemented data processing method for use in electronically performing one or more privacy assessments of computer code, the method comprising:
receiving, by one or more computer processors, a request to monitor particular computer code for new versions of the particular computer code;
receiving, by one or more computer processors, one or more computer storage locations where new versions of the particular computer code may be stored;
monitoring, by one or more computer processors, the one or more computer storage locations to determine whether any new versions of the particular computer code have been stored in the one or more computer storage locations by executing the data processing steps of:
(A) receiving an indication that new computer code having an identifier associated with the particular computer code has been stored in the one or more computer storage locations, and
(B) comparing the contents of the new computer code with one or more versions of the particular computer code that have been assessed as part of a previous privacy assessment, and
in response to determining that the contents of the new computer code are different from the contents of the one or more versions the particular computer code that have been assessed as part of a previous privacy assessment, communicating, by one or more computer processors, an alert to a user indicating that a new version of the particular computer code exists; and
in response to determining that the contents of the new computer code are different from the contents of the one or more versions of the particular computer code that have been assessed as a part of a previous privacy assessment:
automatically electronically analyzing, by one or more computer processors, the new computer code to determine one or more privacy-related attributes of the new computer code, each of the privacy-related attributes indicating one or more types of personal information the new computer code collects or accesses;
electronically displaying to an individual, by one or more computer processors, a list of the one or more privacy-related attributes of the new computer code;
electronically displaying, by one or more computer processors, one or more prompts to the individual, wherein each prompt informs the user to input information regarding one or more particular attributes of the one or more privacy-related attributes; and
communicating, by one or more computer processors, the information regarding the particular privacy-related attributes to one or more second individuals for use in conducting a privacy assessment of the new computer code.

2. The computer-implemented data processing method of claim 1 , wherein the one or more computer storage locations comprises an app store.

3. The computer-implemented data processing method of claim 1 , wherein the one or more computer storage locations comprises a designated folder in computer memory.

4. The computer-implemented data processing method of claim 1 , wherein the new computer code is computer code that is associated with a website and the one or more storage locations comprises a URL.

5. The computer-implemented data processing method of claim 4 , further comprising:
monitoring, by one or more computer processors, a location of a privacy policy on the website; and
in response to the location of the privacy policy satisfying one or more specified criteria, communicating, by one or more computer processors, an alert to a user.

6. The computer-implemented data processing method of claim 5 , wherein the one or more specified criteria comprise the location of the privacy policy being different from a specified location on the website.

7. A computer-implemented data processing method for use in electronically performing one or more privacy assessment of computer code, the method comprising:
receiving, by one or more computer processors, a request to monitor particular computer code for new versions of the particular computer code;
receiving, by one or more computer processors, one or more computer storage locations where new versions of the particular computer code may be stored;
monitoring, by one or more computer processors, the one or more computer storage locations to determine whether any new versions of the particular computer code have been stored in the one or more computer storage locations by executing the data processing steps of:
(A) receiving an indication that new computer code having an identifier associated with the particular computer code has been stored in the one or more computer storage locations, and
(B) comparing the contents of the new computer code with one or more versions of the particular computer code that have been assessed as part of a previous privacy assessment, and
in response to determining that the contents of the new computer code are different from the contents of the one or more versions the particular computer code that have been assessed as part of a previous privacy assessment, communicating, by one or more computer processors, an alert to a user indicating that a new version of the particular computer code exists; and
in response to determining that the contents of the new computer code are different from the contents of the one or more versions of the computer code that have been assessed as a part of a previous privacy assessment:
automatically electronically analyzing, by one or more computer processors, the new computer code to determine whether the new computer code has any one of a specified plurality of privacy-related attributes; and
in response to determining that the new computer code has a particular one of the specified plurality of privacy-related attributes: (A) executing, by one or more computer processors, the steps of: (i) electronically displaying one or more prompts to a user requesting that the user input information regarding the particular privacy-related attribute; (ii) receiving input information from the user regarding the particular privacy-related attribute; and (iii) communicating the input information to a second user for use in a privacy assessment of the new computer code; (B) changing an indicator associated with the new computer code to indicate that, before the new computer code is launched, the attribute should be reviewed by one or more designated individuals; and (C) changing an indicator associated with the new computer code to indicate that, before the new computer code is launched, the new computer code should be modified to not include the particular privacy-related attribute.

8. The computer-implemented data processing method of claim 7 , wherein the particular privacy-related attribute is that the computer code collects information regarding the web browsing habits of users of the new computer code.

9. The computer-implemented data processing method of claim 7 , wherein the information regarding one or more particular attributes comprises a reason that the new computer code has the one or more attributes.

10. The computer-implemented data processing method of claim 7 , wherein the one or more computer storage locations comprises an app store.

11. The computer-implemented data processing method of claim 7 , wherein the one or more computer storage locations comprises a designated folder in computer memory.

12. The computer-implemented data processing method of claim 7 , wherein the new computer code is computer code that is associated with a website and the one or more storage locations comprises a URL.

13. A computer-implemented data processing method for use in electronically performing one or more privacy assessments of computer code, the method c

Assignees

• Onetrust Llc

Inventors

• Barday Kabir A

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• G06Q10/06

  Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title