US 10,567,439 B2Granted

Data processing systems and methods for performing privacy assessments and monitoring of new versions of computer code for privacy compliance

AssigneeOneTrust, LLC

InventorKabir A. Barday

Life of this patent

Estimating the term…

Loading patent…

Abstract

Data processing systems and methods, according to various embodiments, perform privacy assessments and monitor new versions of computer code for updated features and conditions that relate to compliance with privacy standards. The systems and methods may obtain a copy of computer code (e.g., a software application or code associated with a website) that collects and/or uses personal data, and then automatically analyze the computer code to identify one or more privacy-related attributes that may impact compliance with applicable privacy standards. The system may be adapted to monitor one or more locations (e.g., an online software application marketplace, and/or a specified website) to determine whether the application or website has changed. The system may, after analyzing the computer code, display the privacy-related attributes, collect information regarding the attributes, and automatically notify one or more designated individuals (e.g., privacy office representatives) regarding the attributes and information collected.

Claims20

Dependent claims

A computer system for use in automatically monitoring computer code for changes within the context of privacy management, the computer system comprising:

one or more computer processors;
computer memory embodied in one or more computer storage locations operatively coupled to the one or more computer processors that stores particular computer code, wherein the computer system is configured for:
receiving an indication that new computer code has been stored in the computer memory;
and
comparing the contents of the new computer code with one or more versions of the particular computer code that have been assessed as a part of a previous privacy assessment;
in response to determining that the contents of the new computer code are different from the contents of the one or more versions of the particular computer code that have been assessed as a part of a previous privacy assessment, communicating, by the one or more computer processors, an alert to a user indicating that a new version of the particular computer code exists;
and
in response to determining that the contents of the new computer code are different from the contents of the one or more versions of the particular computer code that have been assessed as a part of a previous privacy assessment:
automatically electronically analyzing, by the one or more computer processors, the new computer code to determine one or more privacy-related attributes of the new computer code, each of the privacy-related attributes indicating one or more types of personal information the new computer code collects or accesses;
electronically displaying to an individual, by the one or more computer processors, a list of the one or more privacy-related attributes of the new computer code;
electronically displaying, by the one or more computer processors, one or more prompts to the individual, wherein each prompt informs the user to input information regarding one or more particular attributes of the one or more privacy-related attributes;
and
communicating, by the one or more computer processors, the information regarding the particular privacy-related attributes for use in conducting a privacy assessment of the new computer code.

10 more elements

A computer system for use in automatically monitoring computer code for changes within the context of privacy management, the computer system comprising:

at least one processor;
one or more computer storage locations that store particular computer code;
and
memory operatively coupled to the at least one processor, wherein the computer system is configured for:
receiving an indication that new computer code having an identifier associated with the particular computer code has been stored in the one or more computer storage locations;
comparing the contents of the new computer code with one or more versions of the particular computer code that have been assessed as a part of a previous privacy assessment,
in response to determining that the contents of the new computer code are different from the contents of the one or more versions of the particular computer code that have been assessed as a part of a previous privacy assessment:
automatically electronically analyzing the new computer code to determine whether the new computer code has any one of a specified plurality of privacy-related attributes;
and
in response to determining that the new computer code has a particular one of the specified plurality of privacy-related attributes:
(A) executing the steps of:
(i) flagging the new computer code for manual review;
(ii) electronically displaying one or more prompts to a user requesting that the user input information regarding the particular privacy-related attribute;
(iii) receiving input information from the user regarding the particular privacy-related attribute;
and (iv) communicating the input information to a second user for use in a privacy assessment of the new computer code.

12 more elements

A computer-implemented data processing method for use in automatically monitoring computer code for changes within the context of privacy management, the method comprising:

(A) automatically electronically, by one or more computer processors, analyzing one or more new versions of computer code to determine one or more privacy-related attributes of the one or more new versions of computer code;
(B) in response to determining that the one or more new versions of the computer code have a particular privacy-related attribute of the one or more privacy-related attributes:
(i) automatically flagging the one or more new versions of the particular computer code for manual review;
(ii) electronically displaying to an individual, by one or more computer processors, a list of the determined one or more privacy-related attributes;
(iii) electronically displaying, by one or more computer processors, one or more prompts to an individual wherein each prompt informs the individual to input information regarding the one or more attributes;
and
(iv) communicating, by one or more computer processors, the information regarding the one or more privacy-related attributes to one or more second individuals for use in conducting a privacy assessment of the new computer code.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/505,461Filed 8 Jul 2019 · continuation
Priority: 10 Jun 2016
Published: US 2019/0124122 A131 Oct 2019
Granted: 18 Feb 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06Q 10/06
Administration; Management: resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation…
H04L 63/04
Network architectures or network communication protocols for network security: for providing a confidential data exchange among entities…
H04L
Digital communication

Family

Application62/348,695Us provisional application · filed 10 Jun 2016
Application62/353,802Us provisional application · filed 23 Jun 2016
Application62/360,123Us provisional application · filed 8 Jul 2016
Application15/254,901Parent of this division · filed 1 Sep 2016
Application15/671,073Parent of this continuation · filed 7 Aug 2017
US 9,729,583 B1Parent of this division · filed 8 Aug 2017
Application15/882,989Parent of this continuation · filed 29 Jan 2018
US 9,882,935 B2Parent of this continuation · filed 30 Jan 2018
Application16/228,250Parent of this continuation · filed 10 Dec 2018
US 10,165,011 B2Parent of this continuation · filed 25 Dec 2018
US 2019/0334953 A1Pre-grant publication · published 31 Oct 2019
US 10,348,775 B2Parent of this continuation
Application15/671,073Parent of this division
US 2017/0359387 A1Published application
US 2018/0152483 A1Published application
US 2019/0124122 A1Published application
US 10,567,439 B2This patent

From the US filing history. Foreign family members aren’t listed.