Privacy management systems and methods

A system for generating a notification for a data breach experienced by an entity with respect to a first territory, the system comprising:

• one or more processors;
• and
• computer memory including computer-executable instructions configured to, when executed by the one or more processors, cause the system to at least:
• receive a request from a user to determine whether to disclose the data breach for the first territory;
• and
• at least partially in response to receiving the request to determine whether to disclose the data breach for the first territory:
• generate a master questionnaire comprising a plurality of questions, wherein the plurality of questions is included in the master questionnaire based at least in part on an ontology comprising a mapping of one or more data breach reporting requirements for the first territory to one or more of the plurality of questions;
• cause a request for an answer from the user to each of the plurality of questions of the data breach master questionnaire;
• receive input indicating the answer originating from the user to each of the plurality of questions of the data breach master questionnaire;
• determine, based at least in part on the answer to at least one of the plurality of questions, to include the first territory in the listing of affected jurisdictions presented to the user on a graphical user interface;
• cause the listing of jurisdictions to be presented to the user via the graphical user interface, wherein the listing of jurisdictions comprises an indication of the first territory;
• and
• at least partially in response to determining to disclose the data breach for the first territory, automatically generate the notification for the first territory.

A non-transitory computer-readable medium storing computer-executable instructions for generating one or more notifications for a data breach experienced by an entity with respect to a plurality of territories, the computer-executable instructions are configured to, when executed by one or more computer processors, cause the one or more computer processors to:

• receive an indication of an occurrence of the data breach;
• at least partially in response to receiving the indication of the occurrence of the data breach, provide a graphical user interface for display via a user device to a user, wherein the graphical user interface provides a prompt requesting at least one of territories in which the entity conducts business or territories affected by the occurrence of the data breach;
• receive an indication of a first territory and a second territory originating from the user;
• at least partially in response to receiving the indication of the first territory and the second territory, generate a master questionnaire comprising a plurality of questions, wherein the plurality of questions is included in the master questionnaire based at least in part on an ontology comprising a mapping of one or more data breach reporting requirements for the first territory to one or more of the plurality of questions and one or more data breach reporting requirements for the second territory to one or more of the plurality of questions;
• cause a request for an answer to each of the plurality of questions in the master questionnaire from the user;
• receive input indicating the answer to each of the plurality of questions in the master questionnaire originating from the user;
• determine based at least in part on the answer to at least one of the plurality of questions, to include the first territory in a listing of jurisdictions presented to the user on the graphical user interface;
• determine based at least in part on the answer to at least one of the plurality of questions, to not include the second territory in the listing of jurisdictions presented to the user on the graphical user interface;
• cause the listing of jurisdictions to be presented via the graphical user interface, wherein the listing of jurisdictions comprises an indication of the first territory and does not comprise an indication of the second territory;
• and
• at least partially in response to determining to disclose the data breach for the first territory, automatically generate a first notification for the first territory.