Systems and methods for tracking data protection compliance of entities that use personally identifying information (PII)

A computer-implemented method for tracking data protection compliance of a plurality of entities using personally identifying information (“PII”), the method implemented by a computing system comprising a server in communication with a user computing device associated with a user and a requesting entity computing device associated with a requesting entity, the server comprising at least one processor communicatively coupled to a memory device including a user profile associated with the user, the method comprising:

• receiving, from the requesting entity computing device, a PII consent request for access to a requested PII set of the user, the PII consent request identifying a reason code associated with the requested PII set;
• determining, based on the PII consent request, at least one PII item associated with the reason code;
• transmitting, to the requesting entity, a notification indicating user consent for the requesting entity to retrieve the at least one PII item from a third-party PII storage entity;
• updating, in the memory device, the user profile to track the requesting entity with the at least one PII item;
• receiving, from the user computing device, a PII removal request indicating that the user revokes the user consent previously provided to the requesting entity;
• transmitting, to the requesting entity, a removal notification including (i) the revoked user consent, (ii) an identification of the at least one PII item to be removed;
• monitoring the requesting entity to determine a duration of time the requesting entity spent implementing the removal notification;
• receiving, from the requesting entity, a removal compliance response in response to the removal notification, the removal compliance response indicating that the at least one PII item has been removed;
• and
• generating a consent recommendation associated with the requesting entity based on the monitoring.

At least one non-transitory computer-readable storage medium of a server comprising at least one processor and a memory device including a user profile associated with a user, the server in communication with a user computing device associated with the user and a requesting entity computing device associated with a requesting entity, the computer-readable storage medium including computer-executable instructions for tracking data protection compliance of a plurality of entities using personally identifying information (“PII”), wherein when the computer-executable instructions are executed by the at least one processor of the server, the computer-executable instructions cause the at least one processor to:

• receive, from the requesting entity computing device, a PII consent request for access to a requested PII set of the user, the PII consent request identifying a reason code associated with the requested PII set;
• determine, based on the PII consent request, at least one PII item associated with the reason code;
• transmit, to the requesting entity, a notification indicating user consent for the requesting entity to retrieve the at least one PII item from a third-party PII storage entity;
• update, in the memory device, the user profile to track the requesting entity with the at least one PII item;
• receive, from the user computing device, a PII removal request indicating that the user revokes the user consent previously provided to the requesting entity;
• transmit, to the requesting entity, a removal notification including (i) the revoked user consent, (ii) an identification of the at least one PII item to be removed;
• monitor the requesting entity to determine a duration of time the requesting entity spent implementing the removal notification;
• receive, from the requesting entity, a removal compliance response in response to the removal notification, the removal compliance response indicating that the at least one PII item has been removed;
• and
• generate a consent recommendation associated with the requesting entity based on the monitoring.