Data processing systems and methods for automatically protecting sensitive data within privacy management systems

A computer system for automatically protecting sensitive information, the computer system comprising:

• one or more computer processors;
• and
• computer memory;
• and
• a non-transitory computer-readable medium storing computer-executable instructions that, when executed by the one or more computer processors, cause the one or more computer processors to perform operations comprising:
• receiving a data subject access request associated with a particular data subject;
• at least partially in response to receiving the data subject access request, determining, based at least in part on the data subject access request, a data source associated with the particular data subject;
• at least partially in response to receiving the data subject access request, acquiring one or more pieces of personal data associated with the particular data subject from the data source;
• storing the one or more pieces of personal data in the computer memory;
• generating metadata for the one or more pieces of personal data based at least in part on acquiring the one or more pieces of personal data;
• storing the metadata for the one or more pieces of personal data in the computer memory;
• associating the one or more pieces of personal data with the metadata for the one or more pieces of personal data in the computer memory using a data structure;
• processing the data subject access request using the one or more pieces of personal data;
• determining, based at least in part on the metadata for the one or more pieces of personal data, whether one or more inactivity criteria have been met;
• and
• at least partially in response to determining that one or more of the one or more inactivity criteria have been met, deleting the one or more pieces of personal data from the computer memory.

A non-transitory computer-readable medium storing computer-executable instructions for:

• receiving, by one or more computer processors, a data subject access request associated with a particular data subject;
• at least partially in response to receiving the data subject access request, determining, by the one or more computer processors, based at least in part on the data subject access request, a data source associated with the particular data subject;
• at least partially in response to receiving the data subject access request, acquiring, by the one or more computer processors, personal data associated with the particular data subject from the data source;
• storing, by the one or more computer processors in a computer memory, the personal data;
• processing, by the one or more computer processors, the data subject access request using the personal data;
• at least partially in response to processing the data subject access request, applying, by the one or more computer processors, a cryptographic process to the personal data to generated encrypted personal data;
• storing, by the one or more computer processors in the computer memory, the encrypted personal data;
• at least partially in response to storing the encrypted personal data, deleting, by the one or more computer processors from the computer memory, the personal data;
• receiving, by the one or more computer processors, a verification request associated with the particular data subject, the verification request comprising a first piece of encrypted data;
• comparing, by the one or more computer processors, the first piece of encrypted data to the encrypted personal data;
• determining, by the one or more computer processors, based at least in part on comparing the first piece of encrypted data to the encrypted personal data, whether the first piece of encrypted data matches the encrypted personal data;
• and generating, by the one or more computer processors, based at least in part on determining whether the first piece of encrypted data matches the encrypted personal data, a response to the verification request.

A computer system for automatically protecting sensitive information, the computer system comprising:

• receiving means for receiving a data subject access request associated with a particular data subject;
• data asset determination means for determining, at least partially in response to receiving the data subject access request, a data asset that stores personal data associated with the particular data subject;
• credentialing means for retrieving, from a computer memory, one or more credentials for accessing the data asset;
• data asset access means for accessing the data asset using the one or more credentials to obtain the personal data associated with the particular data subject;
• data subject access request processing means for processing the data subject access request using the personal data associated with the particular data subject;
• metadata generating means for:
• updating metadata for the one or more credentials based at least in part on accessing the data asset;
• storing the updated metadata for the one or more credentials in the computer memory;
• and
• associating the one or more credentials with the updated metadata for the one or more credentials in the computer memory using a data map;
• determining, by one or more computer processors, based at least in part on the updated metadata for the one or more credentials, that a credential inactivity threshold has been met;
• and
• at least partially in response to determining that the credential inactivity threshold has been met:
• deleting the one or more credentials from the computer memory;
• and
• deleting the updated metadata for the one or more credentials from the computer memory.