US 10,242,228 B2Granted

Data processing systems for measuring privacy maturity within an organization

AssigneeOneTrust, LLC

InventorsKabir A. Barday, Jonathan Blake Brannon

Life of this patent

Estimating the term…

Loading patent…

Abstract

A privacy compliance measurement system, according to particular embodiments, is configured to determine compliance with one or more privacy compliance requirements by an organization or sub-group of the organization. In various embodiments, the system is configured to determine a privacy maturity rating for each of a plurality of sub-groups within an organization. In some embodiments, the privacy maturity rating is based at least in part on: (1) a frequency of risks or issues identified with Privacy Impact Assessments (PIAs) performed or completed by the one or sub-groups; (2) a relative training level of members of the sub-groups with regard to privacy related matters; (3) a breadth and amount of personal data collected by the sub-groups; and/or (4) etc. In various embodiments, the system is configured to automatically modify one or more privacy campaigns based on the determined privacy maturity ratings.

Claims20

Dependent claims

A non-transitory computer-readable medium storing computer-executable instructions for measuring a plurality of individuals' compliance with one or more privacy-related requirements, the method comprising:

determining, by one or more processors, for each of one or more pieces of computer code, one or more respective storage locations;
electronically obtaining, by one or more processors, each of the one or more pieces of computer code based on the one or more respective storage locations;
automatically electronically analyzing each of the one or more pieces of computer code to determine one or more privacy-related attributes of each of the one or more pieces of computer code, each of the privacy-related attributes indicating one or more types of privacy campaign data that the computer code collects or accesses, the privacy campaign data comprising at least a number of privacy campaigns facilitated by the one or more pieces of computer code;
in response to determining that the computer code has a particular one of the one or more privacy-related attributes:
(A) executing the steps of:
(i) electronically displaying one or more prompts to a first individual requesting that the first individual input information regarding the particular privacy-related attribute;
(ii) receiving input information from the first individual regarding the particular privacy-related attribute;
and (iii) communicating the information regarding the particular privacy-related attribute to one or more second individuals for use in conducting a privacy assessment of the computer code;
(B) changing an indicator associated with the code to indicate that, before the code is launched, the particular attribute should be reviewed by one or more designated individuals;
and (C) changing an indicator associated with the code to indicate that, before the code is launched, the code should be modified to not include the particular attribute;
analyzing, by one or more processors, for at least one of the plurality of individuals, one or more pieces of publicly available data associated with the at least one of the plurality of individuals, the one or more pieces of publicly available data comprising one or more pieces of publicly available data selected from the group consisting of:
one or more privacy disclaimers corresponding with the one or more pieces of computer code;
and one or more privacy notices associated with one of more websites corresponding to the plurality of individuals;
determining, by one or more processors, based at least in part on the one or more types of privacy campaign data that the computer code collects or accesses and the one or more pieces of publicly available data, a privacy maturity score for the plurality of individuals;
and
displaying, by one or more processors, the privacy maturity score on a display screen associated with a computing device.

13 more elements

A computer-implemented data processing method for measuring a particular organization's compliance with one or more requirements associated with one or more pieces of computer code originating from the particular organization, the method comprising:

determining, by one or more processors, for each of the one or more pieces of computer code, one or more respective storage locations;
electronically obtaining, by one or more processors, each of the one or more pieces of computer code based on the one or more respective storage locations;
automatically electronically analyzing each of the one or more pieces of computer code to determine one or more privacy-related attributes of each of the one or more pieces of computer code, each of the privacy-related attributes indicating one or more types of privacy campaign data that the computer code collects or accesses comprising at least a number of privacy campaigns facilitated by the one or more pieces of computer code;
in response to determining that the computer code has a particular one of the one or more privacy-related attributes:
(A) executing the steps of:
(i) electronically displaying one or more prompts to a first individual requesting that the first individual input information regarding the particular privacy-related attribute;
(ii) receiving input information from the first individual regarding the particular privacy-related attribute;
and (iii) communicating the information regarding the particular privacy-related attribute to one or more second individuals for use in conducting a privacy assessment of the computer code;
(B) changing an indicator associated with the code to indicate that, before the code is launched, the particular attribute should be reviewed by one or more designated individuals;
and (C) changing an indicator associated with the code to indicate that, before the code is launched, the code should be modified to not include the particular attribute;
scanning one or more publicly available data sources for one or more data records associated with the particular organization, the one or more data records comprising one or more data records selected from the group consisting of:
one or more privacy disclaimers corresponding with the one or more pieces of computer code;
and one or more privacy notices associated with one or more websites corresponding to the particular organization;
determining, by one or more processors, based at least in part on the one or more types of privacy campaign data that the computer code collects or accesses and the one or more data records, a privacy maturity score for the particular organization;
and
displaying, by one or more processors, the privacy maturity score on a display screen associated with a computing device.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/042,642Filed 23 Jul 2018 · continuation in part
Priority: 10 Jun 2016
Published: US 2018/0341782 A129 Nov 2018
Granted: 26 Mar 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F 21/54
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by adding security routines or objects to programs
G06F 21/577
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
H04L 63/04
Network architectures or network communication protocols for network security: for providing a confidential data exchange among entities…

Family

Application62/348,695Us provisional application · filed 10 Jun 2016
Application62/353,802Us provisional application · filed 23 Jun 2016
Application62/360,123Us provisional application · filed 8 Jul 2016
Application15/254,901Parent of this continuation-in-part · filed 1 Sep 2016
Application15/619,251Parent of this continuation-in-part · filed 9 Jun 2017
US 9,729,583 B1Parent of this continuation-in-part · filed 8 Aug 2017
US 2018/0341782 A1Pre-grant publication · published 29 Nov 2018
US 10,032,172 B2Parent of this continuation-in-part
US 2017/0357982 A1Published application
US 10,242,228 B2This patent

From the US filing history. Foreign family members aren’t listed.