Method, software and device for automatically scoring privacy protection based on evidence

A computing device for scoring performance of a plurality of privacy protection activities by an organization, said device comprising:

• at least one processor;
• memory in communication with said at least one processor;
• and
• software code stored in said memory, which when executed by said at least one processor causes said computing device to:
• receive a plurality of electronic reports, each of said electronic reports indicating that said organization performs one of said plurality of privacy protection activities and providing evidence that said organization has performed said privacy protection activity;
• maintain a plurality of lifespan metrics, each measuring a lifespan for an associated one of said electronic reports, after which said evidence provided in that electronic report is deemed to have expired;
• and
• calculate a score reflective of extent of performance of said plurality of privacy protection activities by said organization, taking into account those of said plurality of electronic reports providing evidence that has not expired.

A computer-readable medium storing instructions which when executed adapt a computing device to:

• receive a plurality of electronic reports, each of said electronic reports indicating that a organization performs a particular privacy protection activity of a plurality of privacy protection activities, and providing evidence that said organization has performed said particular privacy protection activity;
• maintain a plurality of lifespan metrics, each measuring a lifespan for an associated one of said electronic reports, after which said evidence provided in that electronic report is deemed to have expired;
• and
• calculate a score reflective of extent of performance of said plurality of privacy protection activities by said organization, taking into account those of said plurality of electronic reports providing evidence that has not expired.