Generating and continuously maintaining a record of data processing activity for a computer-implemented system
AssigneeRelyance, Inc.
InventorsAbhishek Sharma, Leila Rose Golchehreh, Theophile Gervet, Amer Alsabbagh, Sara Higgins, Evan Fairweather
Life of this patent
Estimating the term…
Abstract
Technologies related to generating and continuously maintaining a record of data processing activities are described herein, where the processing record is generated on behalf of an enterprise that operates an enterprise computing system. The processing record includes numerous fields related to the processing of data by the enterprise computing system, and such fields are automatically generated based upon information pertaining to the enterprise computing system that is acquired from several different sources.
Claims20
A computing system comprising:
- a processor;
- and
- memory storing instructions that, when executed by the processor, cause the processor to perform acts comprising:
- obtaining first data from a first data source, wherein the first data source is in network communication with the computing system;
- obtaining second data from a second data source, wherein the second data source is in network communication with the computing system, and further wherein the first data source and the second data source are different from one another;
- receiving, from a computing device of an enterprise, a request to construct a data processing record on behalf of the enterprise;
- upon receiving the request, constructing the data processing record for the enterprise based upon the first data and the second data, wherein the data processing record comprises an entry that indicates that that a computer-executable application corresponding to the enterprise processes data that relates to a person, wherein the entry is generated by the computing system based upon the first data and the second data, and further wherein the constructed data processing record indicates whether or not the enterprise complies with at least one of a policy, law, or regulation with respect to processing the data that relates to the person;
- and
- transmitting the data processing record to the computing device of the enterprise for presentment to a user of the computing device of the enterprise.
A method that is configured generate a data processing record for an organization, the method comprising:
- obtaining data from a data source, wherein the data source is in network communication with the computing system, and further wherein the data source is private and proprietary to the organization;
- receiving, from a computing device of the organization, a request to construct the data processing record on behalf of the organization;
- and
- upon receiving the request, constructing the data processing record for the organization, wherein constructing the data processing record comprises:
- generating a first value for a first field of the data processing record based upon the data from the data source, wherein the first value for the first field indicates that data relating to a person is processed by a computing system of the organization;
- and
- generating a second value for a second field of the data processing record, wherein the second value for the second field is generated based upon the first value for the first field, and further wherein the constructed data processing record indicates whether or not the organization complies with at least one of a policy, law, or regulation with respect to processing the data relating to the person.
A computer-readable storage medium comprising instructions that, when executed by a processor, cause the processor to perform acts comprising:
- obtaining first data from a first data source, wherein the first data source is in network communication with the computing system;
- obtaining second data from a second data source, wherein the second data source is in network communication with the computing system, and further wherein the first data source and the second data source are different from one another;
- receiving, from a computing device of an enterprise, a request to construct a data processing record on behalf of the enterprise;
- upon receiving the request, constructing the data processing record for the enterprise based upon the first data and the second data, wherein the data processing record comprises an entry that indicates that that a computer-executable application corresponding to the enterprise processes data that relates to a person, wherein the entry is generated by the computing system based upon the first data and the second data, and further wherein the constructed data processing record indicates whether or not the enterprise complies with at least one of a policy, law, or regulation with respect to processing the data that relates to the person;
- and
- transmitting the data processing record to the computing device of the enterprise for presentment to a user of the computing device of the enterprise.
Dependencies are inferred from the claim text.