US 10,949,170 B2Granted

Data processing systems for integration of consumer feedback with data subject access requests and related methods

AssigneeOneTrust, LLC

InventorsKabir A. Barday, Jason L. Sabourin, Jonathan Blake Brannon, Mihir S. Karanjkar, Kevin Jones

Life of this patent

Estimating the term…

Loading patent…

Abstract

A particular organization may undertake a plurality of different privacy campaigns, processing activities, etc. that involve the collection and storage of personal data. The system may be configured to collect customer satisfaction data, for example: (1) as part of a data subject access request submission form; (2) when providing one or more results of a data subject access request to the data subject; or (3) at any other suitable time. The customer satisfaction data may be collected in the form of a suitable survey, free-form response questionnaire, etc. (e.g., thumbs up vs. thumbs down, etc.). Additionally, by integrating a feedback survey with the data subject access request process, the system may increase a number of consumers that provide responses to the feedback survey. In particular embodiments, the system is configured to require the requestor to respond to the feedback survey prior to submitting the data subject access request.

Claims20

Dependent claims

A computer-implemented data processing method for facilitating feedback with respect to a consent receipt management system, the method comprising:

providing, by one or more computer processors, at the consent capture point, a user interface for initiating a transaction between an entity and a data subject, the transaction involving processing personal data of the data subject by the entity;
receiving, by one or more computer processors, at the consent capture point, a request to initiate the transaction between the entity and the data subject;
in response to receiving the request:
generating, by one or more computer processors, by a consent receipt management system, a unique consent receipt key;
identifying, by one or more computer processors, a transaction identifier associated with the transaction;
determining a unique subject identifier for the data subject;
electronically storing the unique subject identifier, the unique consent receipt key, and the transaction identifier in computer memory;
electronically associating the unique subject identifier, the unique consent receipt key, and the transaction identifier;
generating a consent record for the transaction, the consent record comprising at least the unique subject identifier and the unique consent receipt key;
and
automatically providing, by one or more computer processors, a first feedback survey to the data subject;
receiving, by one or more processors, from the data subject, a completed version of the first feedback survey from the requestor;
automatically adding, by one or more processors, the completed version of the first feedback survey from the data subject to a plurality of completed versions of feedback surveys that comprise, for each of a plurality of data subjects, a respective completed version of the first feedback survey from a respective data subject that has initiated the transaction via the consent capture point;
automatically calculating, by one or more computer processors, an aggregate feedback score for the consent capture point based at least in part on the plurality of completed versions of the feedback surveys;
and
automatically flagging, by one or more computer processors, the consent capture point for modification based at least in part on the aggregate feedback score for consent capture point.

13 more elements

A consent receipt management system comprising:

one or more processors;
and
computer memory, wherein the consent receipt management system is configured for:
receiving a request to initiate a transaction between an entity and a data subject via an electronic form, the transaction involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction;
in response to receiving the request:
identifying a transaction identifier associated with the transaction;
generating, a unique consent receipt key for the transaction;
and
determining a unique subject identifier for the data subject;
electronically storing the unique subject identifier, the unique consent receipt key, and the transaction identifier in computer memory;
electronically associating the unique subject identifier, the unique consent receipt key, and the transaction identifier;
generating a consent record for the transaction, the consent record comprising at least the unique subject identifier and the unique consent receipt key;
electronically transmitting the consent record and a first feedback survey to the data subject;
receiving, from the data subject a completed version of the first feedback survey;
and
modifying an aggregate feedback score for the electronic form based at least in part on the completed version of the first feedback survey to create a modified aggregate feedback score;
and
storing the modified aggregate feedback score in computer memory.

15 more elements

A computer-implemented data processing method for managing a consent receipt and data subject feedback under a transaction, the method comprising:

providing, by one or more processors, a user interface for initiating a transaction between an entity and a data subject;
receiving, by one or more processors, a request to initiate the transaction between the entity and the data subject from the data subject via the user interface;
in response to receiving the request, generating, by a third party consent receipt management system, a unique consent receipt key;
receiving, by one or more processors, from the data subject, a unique subject identifier
electronically storing, by one or more processors, the unique subject identifier, the unique consent receipt key, and a unique transaction identifier associated with the transaction in computer memory;
electronically associating, by one or more processors, the unique subject identifier, the unique consent receipt key, and the unique transaction identifier;
in response to receiving the request, transmitting, by one or more processors, a consent receipt to the data subject, the consent receipt comprising at least the unique subject identifier, the unique consent receipt key, and a feedback survey;
receiving, by one or more processors, a completed version of the feedback survey from the data subject;
calculating, by one or more processors, a feedback score for at least one of:
(1) the user interface;
and (2) the transaction, based at least in part on the completed version of the feedback score;
and
storing, by one or more processors, the feedback score in computer memory.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/791,589Filed 14 Feb 2020 · continuation in part
Priority: 10 Jun 2016
Published: US 2020/0183655 A111 Jun 2020
Granted: 16 Mar 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification14 codes

G06F 8/20
Arrangements for software engineering: software design
G06F 15/76
Digital computers in general ; Data processing equipment in general: architectures of general purpose stored program computers
G06F 21/552
Detecting local intrusion or implementing counter-measures: involving long-term monitoring or reporting
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes

Family

Application62/348,695Us provisional application · filed 10 Jun 2016
Application62/353,802Us provisional application · filed 23 Jun 2016
Application62/360,123Us provisional application · filed 8 Jul 2016
Application15/254,901Parent of this continuation-in-part · filed 1 Sep 2016
Application15/619,455Parent of this continuation-in-part · filed 10 Jun 2017
Application62/537,839Us provisional application · filed 27 Jul 2017
Application62/541,613Us provisional application · filed 4 Aug 2017
US 9,729,583 B1Parent of this continuation-in-part · filed 8 Aug 2017
Application62/547,530Us provisional application · filed 18 Aug 2017
Application15/853,674Parent of this continuation-in-part · filed 22 Dec 2017
US 9,851,966 B1Parent of this continuation-in-part · filed 26 Dec 2017
Application15/996,208Parent of this continuation-in-part · filed 1 Jun 2018
US 10,019,597 B2Parent of this continuation-in-part · filed 10 Jul 2018
Application16/055,944Parent of this continuation · filed 6 Aug 2018
US 10,181,051 B2Parent of this continuation-in-part · filed 15 Jan 2019
Application16/512,033Parent of this continuation-in-part · filed 15 Jul 2019
US 10,353,673 B2Parent of this continuation · filed 16 Jul 2019
US 2020/0183655 A1Pre-grant publication · published 11 Jun 2020
US 10,564,935 B2Parent of this continuation-in-part
Application16/512,033Parent of this continuation
Application16/055,944Parent of this continuation-in-part
US 2017/0357502 A1Published application
US 2018/0137305 A1Published application
US 2018/0276415 A1Published application
US 2018/0349641 A1Published application
US 2019/0339946 A1Published application
US 10,949,170 B2This patent

From the US filing history. Foreign family members aren’t listed.