-
公开(公告)号:US11797528B2
公开(公告)日:2023-10-24
申请号:US17370650
申请日:2021-07-08
申请人: OneTrust, LLC
发明人: Kevin Jones , Saravanan Pitchaimani , Subramanian Viswanathan , Milap Shah , Ramana Malladi , Aadil Allidina , Matthew Hennig , Dylan D. Patton-Kuhl , Jonathan Blake Brannon
IPC分类号: G06F16/242 , G06F16/25 , G06F16/23 , G06F16/2457 , G06N20/00 , G06F11/34
CPC分类号: G06F16/2423 , G06F11/3409 , G06F16/2358 , G06F16/2457 , G06F16/258 , G06N20/00 , G06F2201/80
摘要: Various embodiments provide methods, apparatus, systems, computing devices, computing entities, and/or the like for identifying targeted data for a data subject across a plurality of data objects in a data source. In accordance with one embodiment, a method is provided comprising: receiving a request to identify targeted data for a data subject; identifying a first data object using metadata for a data source that identifies the first data object as associated with a first targeted data type for a data portion from the request; identifying a first data field from a graph data structure of the first data object that identifies the first data field as used for storing data having the first targeted data type; and querying the first data object based on the first data field and the data for the first targeted data type to identify a first targeted data portion for the data subject.
-
公开(公告)号:US11544409B2
公开(公告)日:2023-01-03
申请号:US17499595
申请日:2021-10-12
申请人: OneTrust, LLC
IPC分类号: G06F21/00 , G06F21/62 , G06F3/0482
摘要: In particular embodiments, a sensitive data management system is configured to remove sensitive data after a period of non-use. Credentials used to access remote systems and/or third-party systems are stored with metadata that is updated with each use of the credentials. After a period of non-use, determined based on credential metadata, the credentials are deleted. Personal data retrieved to process a consumer request is stored with metadata that is updated with each use of the personal data. After a period of non-use, determined based on personal data metadata, the personal data is deleted. The personal data is also deleted if the system determines that the process or system that caused the personal data to be retrieved is no longer in use. An encrypted version of personal data may be stored for later use in verifying proper consumer request fulfillment.
-
公开(公告)号:US11334681B2
公开(公告)日:2022-05-17
申请号:US17463775
申请日:2021-09-01
申请人: OneTrust, LLC
发明人: Kevin Jones , William DeWeese , Justin Devenish , Saravanan Pitchaimani , Jonathan Blake Brannon
IPC分类号: G06F9/44 , G06F21/62 , G06F16/955 , G06F16/904 , G06F16/901
摘要: An application privacy analysis system is described, where the system obtains an application and analyzes it for privacy related data use. The system may determine privacy related activities of the application from established sources of such data and/or may decompile the application and analyze the resulting code to determine the privacy related activities of the application. The system may execute the application and monitor the communications traffic exchanged by the application to determine privacy related activities of the application. The system may store the results of such analyses for future reference.
-
公开(公告)号:US10944725B2
公开(公告)日:2021-03-09
申请号:US16863226
申请日:2020-04-30
申请人: OneTrust, LLC
发明人: Arockia Gunasingam , Steven W. Finch , Saravanan Pitchaimani , Kevin Jones , Jonathan Blake Brannon
摘要: Data stored on a data asset may be migrated to another data asset while maintaining compliance to applicable regulations. A data asset may experience a failure. Based on the type of data stored by that data asset and the applicable regulations, requirements, and/or restrictions that relate to a transfer of that type data from that data asset, a target data asset may be determined. The data stored on the data asset may then be transferred to the target data asset. The disclosed systems may use data models and/or data maps in determining the requirements for a data transfer and selecting target data assets.
-
公开(公告)号:US20220391122A1
公开(公告)日:2022-12-08
申请号:US17887771
申请日:2022-08-15
申请人: OneTrust, LLC
发明人: Arockia Gunasingam , Steven W. Finch , Saravanan Pitchaimani , Kevin Jones , Jonathan Blake Brannon
IPC分类号: G06F3/06
摘要: A chat robot may be used to facilitate interaction with a user in the determination of whether to initiate and process a data subject access request (DSAR). At a DSAR submission webpage, the chatbot may interact with a user to determine the information the user is in need of and/or the actions that the user may take. The chatbot may provide the information, avoiding the processing overhead of submission and fulfillment of a DSAR. In addition, data stored on a data asset may be migrated to another data asset while maintaining compliance to applicable regulations. Based on the type of data stored by that data asset and the applicable regulations, requirements, and/or restrictions that relate to a transfer of that type data from that data asset, a target data asset may be determined. The data stored on the data asset may then be transferred to the target data asset.
-
公开(公告)号:US11475165B2
公开(公告)日:2022-10-18
申请号:US17395759
申请日:2021-08-06
申请人: OneTrust, LLC
发明人: Jonathan Blake Brannon , Kevin Jones , Saravanan Pitchaimani , Haribalan Raghupathy , Mahashankar Sarangapani , Mahesh Sivan , Priya Malhotra
IPC分类号: G06F21/62 , G06F16/35 , G06F16/335
摘要: System and methods are disclosed for redacting analyzing unstructured data in a request for data associated with a data subject to determine whether the unstructured data is relevant to the request. The relevancy of pieces of the unstructured data may be determined by determining a categorization for each such piece of unstructured data and comparing them to known personal data associated with the data subject having the same categorization. Pieces of the unstructured data that do not match known personal data having the same categorization are redacted from the request before the request is processed.
-
公开(公告)号:US20220108222A1
公开(公告)日:2022-04-07
申请号:US17494220
申请日:2021-10-05
申请人: OneTrust, LLC
发明人: Jonathan Blake Brannon , Ashok Kallarakuzhi , Evan Bates , Saravanan Pitchaimani , Vivek Srivastava
IPC分类号: G06N20/00
摘要: Aspects of the present invention provide methods, apparatuses, systems, computing devices, computing entities, and/or the like for detecting prejudice bias in machine-learning models and/or data sets used in training, testing, and/or validating the models. In accordance various aspects, a method is provided comprising: receiving a data set used for training, testing, and/or validating a model that comprises data instances; generating, using a classification model, a prediction of applicability for each sub-category of a plurality of sub-categories for each bias category of a plurality of bias categories for each data instance; determining that a particular sub-category for a particular bias category is applicable to a proportion of the data set, wherein predictions of applicability for the particular sub-category generated for the proportion of the data set satisfies a threshold; and determining, based on the proportion, that the data set has a prejudice bias with respect to the particular bias category.
-
公开(公告)号:US20220035952A1
公开(公告)日:2022-02-03
申请号:US17499595
申请日:2021-10-12
申请人: OneTrust, LLC
IPC分类号: G06F21/62 , G06F3/0482
摘要: In particular embodiments, a sensitive data management system is configured to remove sensitive data after a period of non-use. Credentials used to access remote systems and/or third-party systems are stored with metadata that is updated with each use of the credentials. After a period of non-use, determined based on credential metadata, the credentials are deleted. Personal data retrieved to process a consumer request is stored with metadata that is updated with each use of the personal data. After a period of non-use, determined based on personal data metadata, the personal data is deleted. The personal data is also deleted if the system determines that the process or system that caused the personal data to be retrieved is no longer in use. An encrypted version of personal data may be stored for later use in verifying proper consumer request fulfillment.
-
公开(公告)号:US20210397743A1
公开(公告)日:2021-12-23
申请号:US17463775
申请日:2021-09-01
申请人: OneTrust, LLC
发明人: Kevin Jones , William DeWeese , Justin Devenish , Saravanan Pitchaimani , Jonathan Blake Brannon
IPC分类号: G06F21/62 , G06F16/955 , G06F16/904 , G06F16/901
摘要: An application privacy analysis system is described, where the system obtains an application and analyzes it for privacy related data use. The system may determine privacy related activities of the application from established sources of such data and/or may decompile the application and analyze the resulting code to determine the privacy related activities of the application. The system may execute the application and monitor the communications traffic exchanged by the application to determine privacy related activities of the application. The system may store the results of such analyses for future reference.
-
10.
公开(公告)号:US11122011B2
公开(公告)日:2021-09-14
申请号:US17194662
申请日:2021-03-08
申请人: OneTrust, LLC
发明人: Arockia Gunasingam , Steven W. Finch , Saravanan Pitchaimani , Kevin Jones , Jonathan Blake Brannon
摘要: Data stored on a data asset may be migrated to another data asset while maintaining compliance to applicable regulations. A data asset may experience a failure. Based on the type of data stored by that data asset and the applicable regulations, requirements, and/or restrictions that relate to a transfer of that type data from that data asset, a target data asset may be determined. The data stored on the data asset may then be transferred to the target data asset. The disclosed systems may use data models and/or data maps in determining the requirements for a data transfer and selecting target data assets.
-
-
-
-
-
-
-
-
-