Data processing systems for identifying and modifying processes that are subject to data subject access requests

A personal data processing and analysis system comprising;

• one or more processors;
• one or more data assets that store a plurality of personal data associated with a plurality of data subjects, each piece of the plurality of personal data being associated with a respective particular processing activity of a plurality of processing activities undertaken by an organization;
• and
• computer memory, wherein:
• the computer memory stores one or more data models defining one or more data transfers among the one or more data assets;
• and
• the personal data processing and analysis system is configured for:
• receiving a first data subject request associated with a first data subject from a remote computing device, the first data subject request comprising a request to delete one or more first pieces of personal data from the personal data processing and deletion system, the one or more first pieces of personal data being associated with the first data subject;
• in response to receiving the first data subject request, identifying, based at least in part on the one or more data models and the plurality of processing activities undertaken by the organization, a respective storage location of each of the one or more first pieces of personal data on the one or more data assets;
• in response to identifying the storage location of each of the one or more pieces of personal data, automatically facilitating the deletion of each of the one or more first pieces of personal data from each respective storage location;
• receiving a plurality of additional data subject requests;
• analyzing each of the plurality of additional data subject requests to identify a respective associated processing activity of the plurality of processing activities;
• identifying a particular processing activity of the plurality of processing activities that is associated with at least a particular number of the plurality of additional data subject requests;
• and
• in response to identifying the particular processing activity, automatically taking one or more actions related to the particular processing activity, wherein:
• analyzing each of the plurality of additional data subject requests to identify the respective associated processing activity of the plurality of processing activities comprises using one or more data mapping techniques to identify each respective associated processing activity;
• and
• using the one or more data mapping techniques to identify each respective associated processing activity comprises:
• accessing each of one or more data models:
• and
• scanning each of the one or more data models using respective personal data associated with each of the plurality of data subject requests to identify an associated respective associated processing activity.