Data processing and scanning systems for generating and populating a data inventory

A computer-implemented data processing method for identifying related data stored across data sources, the method comprising:

• initiating, by one or more computer processors, a communication channel with one or more data sources configured to store one or more pieces of personal data;
• scanning, by one or more computer processors via the communication channel, the one or more data sources to identify one or more data fields, wherein each of the identified one or more data fields comprises at least one piece of personal data;
• analyzing, by one or more computer processors, the one or more data fields to determine a first subset of the one or more data fields associated with a first type of personal data;
• analyzing, by one or more computer processors, the one or more data fields to determine a second subset of the one or more data fields associated with a second type of personal data, wherein the second type of personal data is distinct from the first type of personal data;
• determining, by one or more computer processors, an association between a first piece of data in a first field of the first subset of the one or more data fields and a second piece of data in a second field of the second subset of data fields;
• generating, by one or more computer processors, a catalog comprising the first piece of data, the second piece of data, and an indication of the association between the first piece of data and the second piece of data;
• scanning, by one or more computer processors, one or more data repositories using the catalog to identify one or more data attributes associated with at least one of the first piece of data and the second piece of data;
• at least partially in response to identifying one or more data attributes associated with at least one of the first piece of data and the second piece of data, determining by one or more computer processors, whether a data model associated with at least one of the first piece of data and the second piece of data includes the one or more data repositories;
• and
• at least partially in response to determining that the data model associated with at least one of the first piece of data and the second piece of data does not include the one or more data repositories:
• generating, by one or more computer processors, a data inventory for the one or more data repositories comprising an indication of an association between the one or more data repositories and at least one of the first piece of data and the second piece of data;
• and
• modifying, by one or more computer processors, the data model associated with at least one of the first piece of data and the second piece of data to include the data inventory for the one or more data repositories.

A non-transitory computer-readable medium storing computer-executable instructions for scanning one or more data repositories to identify related data stored at the one or more data repositories, the computer-executable instructions comprising computer-executable instructions for:

• establishing, by one or more computer processors, a communication channel with one or more data assets configured to store one or more pieces of data;
• scanning, by one or more computer processors via the communication channel, the one or more data assets to identify a first piece of data of a first data type and a second piece of data of a second data type, wherein the first data type is distinct from the second data type;
• determining, by one or more computer processors, that the first piece of data and the second piece of data are associated with a particular data subject;
• determining, by one or more computer processors, based at least in part on determining that the first piece of data and the second piece of data are associated with the particular data subject, an association between the first piece of data and the second piece of data;
• generating, by one or more computer processors, a catalog comprising the first piece of data, the second piece of data, an indication of the association between the first piece of data and the second piece of data, and an indication of the particular data subject;
• scanning, by one or more computer processors, one or more data repositories using the catalog to identify one or more data attributes associated with at least one of the first piece of data, the second piece of data, and the particular data subject;
• at least partially in response to identifying the one or more data attributes associated with at least one of the first piece of data, the second piece of data, and the particular data subject, determining by one or more computer processors, whether a data model associated with at least one of the first piece of data, the second piece of data, and the particular data subject includes a data inventory associated with the one or more data repositories;
• and
• at least partially in response to determining that the data model associated with at least one of the first piece of data, the second piece of data, and the particular data subject does not include the data inventory associated with the one or more data repositories:
• generating, by one or more computer processors, the data inventory for the one or more data repositories;
• and
• populating, by one or more computer processors, one or more inventory attributes of the data inventory for the one or more data repositories with the indication of the particular data subject.