Data processing systems and communication systems and methods for the efficient generation of risk assessments

    公开(公告)号:US11651402B2

    公开(公告)日:2023-05-16

    申请号:US17836430

    申请日:2022-06-09

    Applicant: OneTrust, LLC

    Inventor: Kabir A. Barday

    CPC classification number: G06Q30/0609 G06Q10/0635 G06Q10/063114 G06Q50/265

    Abstract: Computer implemented methods, according to various embodiments, comprise: (1) integrating a privacy management system with DLP tools; (2) using the DLP tools to identify sensitive information that is stored in computer memory outside of the context of the privacy management system; and (3) in response to the sensitive data being discovered by the DLP tool, displaying each area of sensitive data to a privacy officer (e.g., similar to pending transactions in a checking account that have not been reconciled). A designated privacy officer may then select a particular entry and either match it up (e.g., reconcile it) with an existing data flow or campaign in the privacy management system, or trigger a new privacy assessment to be done on the data to capture the related privacy attributes and data flow information.

    Data processing and scanning systems for assessing vendor risk

    公开(公告)号:US11416589B2

    公开(公告)日:2022-08-16

    申请号:US17493332

    申请日:2021-10-04

    Applicant: OneTrust, LLC

    Abstract: Data processing systems and methods, according to various embodiments, are adapted for automatically assessing the level of security and/or privacy risk associated with doing business with a particular vendor or other entity and for generating training material for such vendors. In various embodiments, the systems may automatically obtain and use any suitable information to assess such risk levels including, for example: (1) any security and/or privacy certifications held by the vendor; (2) the terms of one or more contracts between a particular entity and the vendor; (3) the results of one or more privacy impact assessments for the vendor; and/or (4) any other suitable data. The system may be configured to automatically approve or reject a particular vendor based on the assessed risk level associated with the vendor and this information may be automatically communicated to an entity considering doing business with the vendor and/or the vendor itself.

    Data processing systems for processing and managing data subject access in a distributed environment

    公开(公告)号:US11328092B2

    公开(公告)日:2022-05-10

    申请号:US17347853

    申请日:2021-06-15

    Applicant: OneTrust, LLC

    Abstract: In particular embodiments, a data subject request processing system may be configured to utilize one or more local storage nodes in order to process a data subject access request on behalf of a data subject. In particular embodiments, the one or more local storage nodes may be local to the data subject making the request (e.g., in the same country as the data subject, in the same jurisdiction, in the same geographic area, etc.). The system may, for example, be configured to: (1) receive a data subject access request from a data subject (e.g., via a web form); (2) identify a suitable local storage node based at least in part on the request and/or the data subject; (3) route the data subject access request to the identified local storage node; and (4) process the data subject access request at the identified local storage node.

    Data processing systems and methods for integrating privacy information management systems with data loss prevention tools or other tools for privacy design

    公开(公告)号:US11244367B2

    公开(公告)日:2022-02-08

    申请号:US17316179

    申请日:2021-05-10

    Applicant: OneTrust, LLC

    Inventor: Kabir A. Barday

    Abstract: Computer implemented methods, according to various embodiments, comprise: (1) integrating a privacy management system with DLP tools; (2) using the DLP tools to identify sensitive information that is stored in computer memory outside of the context of the privacy management system; and (3) in response to the sensitive data being discovered by the DLP tool, displaying each area of sensitive data to a privacy officer (e.g., similar to pending transactions in a checking account that have not been reconciled). A designated privacy officer may then select a particular entry and either match it up (e.g., reconcile it) with an existing data flow or campaign in the privacy management system, or trigger a new privacy assessment to be done on the data to capture the related privacy attributes and data flow information.

Patent Agency Ranking