# US 2017/0287033 A1 · Data processing systems and methods for operationalizing privacy compliance via integrated mobile applications > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0287033 A1 - Document ID: US20170287033A1 - Status: Published application - Kind: A1 - Application number: 15/619,451 - Filed: 2017-06-10 - Published: 2017-10-05 - Earliest claimed: 2016-04-01 - Assignees: OneTrust, LLC - Applicants: OneTrust, LLC - Inventors: Kabir A. Barday - Web page: https://patentgrep.com/patent/US20170287033A1 ## CPC - G06Q 30/0609: {Qualifying participants for shopping transactions (payment transaction verification G06Q20/401)} - G06F 21/00: Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity - G06Q 10/063114: {Status monitoring or status determination for a person or group} - G06Q 50/265: {Personal security, identity or safety} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Data processing systems and methods for receiving data regarding a plurality of data privacy campaigns and for using that data to modify stored data associated with the data privacy campaign. In various embodiments, the system may be adapted to: (1) display one or more visual summaries of one or more data flow diagrams that visually depicts key features of the data flow, such as whether data is confidential and/or encrypted; (2) automatically assess and display a relative risk associated with each campaign; and (3) automatically set, monitor, and facilitate the timely completion of an audit schedule for each campaign. In some embodiments, the system is configured to provide a mobile application via which a user may view information related to the privacy campaign, modify that data, etc. ## Claims ### Claim 1 A computer-implemented data processing method for electronically receiving the input of campaign data related to a privacy campaign and electronically calculating a risk level for the privacy campaign based on the data inputs comprising: providing a software application for installation on a mobile computing device; displaying on a graphical user interface, via the software application, a prompt to create an electronic record for a privacy campaign, wherein the privacy campaign utilizes personal data collected from at least one or more persons or one or more entities; receiving a command to create an electronic record for the privacy campaign; creating an electronic record for the privacy campaign and digitally storing the record; presenting, on one or more graphical user interfaces, a plurality of prompts for the input of campaign data related to the privacy campaign; electronically receiving campaign data input by one or more users via the graphical user interface, wherein the campaign data identifies each of: a description of the campaign; one or more types of personal data related to the campaign; a subject from which the personal data was collected; the storage of the personal data; and access to the personal data; processing the campaign data by electronically associating the campaign data with the record for the privacy campaign; receiving, via the software application, one or more inputs related to the privacy campaign; and modifying the electronic record for the privacy campaign based at least in part on the one or more inputs. ### Claim 2 (depends on 1) The computer-implemented data processing method of claim 1, wherein the method further comprises: electronically calculating a risk level for the campaign based upon one or more factors selected from the group consisting of: a nature of the personal data associated with the campaign; a physical storage location of the personal data associated with the campaign; a length of time that the personal data associated with the campaign will be retained in storage; and a type of individual from which the personal data associated with the campaign originated; and digitally storing the risk level associated with the record for the campaign. ### Claim 3 (depends on 1) The computer-implemented data processing method of claim 1, wherein the one or more inputs comprise one or more images of one or more privacy incidents. ### Claim 4 (depends on 3) The computer-implemented data processing method of claim 3, wherein: the one or more images comprise one or more pieces of the personal data; and the method further comprises analyzing the one or more images to identify the one or more pieces of personal data. ### Claim 5 (depends on 4) The computer-implemented data processing method of claim 4, wherein modifying the electronic record for the privacy campaign based at least in part on the one or more inputs comprises adjusting a risk level associated with the privacy campaign based on the one or more pieces of personal data. ### Claim 6 (depends on 4) The computer-implemented data processing method of claim 4, wherein modifying the electronic record for the privacy campaign based at least in part on the one or more inputs comprises modifying an audit schedule of the privacy campaign based on the one or more pieces of personal data. ### Claim 7 (depends on 4) The computer-implemented data processing method of claim 4, wherein the one or more images are one or more images selected from the group consisting of: one or more images captured with an imaging device associated with the mobile computing device; and one or more screenshots from a display screen associated with the mobile computing device. ### Claim 8 (depends on 1) The computer-implemented data processing method of claim 1, wherein: the method further comprises measuring a privacy maturity of a particular organization; the one or more inputs related to the privacy campaign comprise one or more responses to one or more training questionnaires; and measuring the privacy maturity of the particular organization comprises modifying the measured privacy maturity based at least on part on the one or more responses. ### Claim 9 (depends on 8) The computer-implemented data processing method of claim 8, further comprising: modifying a risk level associated with the privacy campaign based at least in part on the measured privacy maturity. ### Claim 10 A computer-implemented data processing method comprising: providing a software application for installation on a mobile computing device; displaying on a graphical user interface, via the software application, a prompt to modify an electronic record for a privacy campaign, wherein the privacy campaign utilizes personal data collected from at least one or more persons or one or more entities; receiving, from a user of the mobile computing device, first information associated with the privacy campaign; modifying the electronic record for the privacy campaign based at least in part on the first information; and displaying, on the graphical user interface, second information associated with the privacy campaign, wherein: the first information comprises information selected from a group consisting of: one or more responses to one or more screening questions; one or more pieces of information related to a particular privacy incident associating with the privacy campaign; one or more response to one or more training quizzes. ### Claim 11 (depends on 10) The computer-implemented data processing method of claim 10, wherein: the first information comprises the one or more pieces of information related to the particular privacy incident; and the method further comprises: analyzing the one or more pieces of information related to the particular privacy incident; and modifying an audit schedule for the privacy campaign based at least in part on the analysis. ### Claim 12 (depends on 11) The computer-implemented data processing method of claim 11, wherein the one or more pieces of information related to the particular privacy incident comprise at least one unique identifier associated with the campaign. ### Claim 13 (depends on 12) The computer-implemented data processing method of claim 12, wherein the electronic record digitally stores campaign data related to a privacy campaign, and the campaign data identifies each of: a description of the privacy campaign; one or more types of personal data related to the privacy campaign; a subject from which the personal data was collected; a storage location of the personal data; and one or more access permissions related to the personal data. ### Claim 14 (depends on 13) The computer-implemented data processing method of claim 13, wherein modifying the electronic record for the privacy campaign based at least in part on the first information comprises populating the campaign data in the electronic record based at least in part on the first information. ### Claim 15 (depends on 14) The computer-implemented data processing method of claim 14, further comprising calculating a risk level for the privacy campaign based on the campaign data, wherein calculating the risk level for the campaign comprises: electronically retrieving the campaign data associated with the electronic record for the campaign; electronically determining a plurality of weighting factors for the campaign, wherein the plurality of weighting factors are based upon a plurality of factors including: a nature of the personal data associated with the campaign; a physical storage location of the personal data associated with the campaign; a length of time that the personal data associated with the campaign will be retained in storage; and a type of individual from which the personal data associated with the campaign originated; electronically assigning a relative risk rating for each of the plurality of factors; and electronically calculating a risk level for the campaign based upon the plurality of weighting factors and the relative risk rating for each of the plurality of factors; and digitally storing the risk level associated with the record for the campaign. ### Claim 16 (depends on 14) The computer-implemented data processing method of claim 14, wherein modifying the electronic record for the privacy campaign based at least in part on the first information comprises: calculating the risk level for the campaign based on the first information; and modifying the risk level based at least in part on the first information. ### Claim 17 (depends on 16) The computer-implemented data processing method of claim 16, further comprising electronically determining an audit schedule for the campaign based at least in part on the risk level. ### Claim 18 (depends on 10) The computer-implemented data processing method of claim 10, wherein the first information associated with the privacy campaign comprises one or more images captured using one or more imaging devices of the mobile computing device. ### Claim 19 (depends on 10) The computer-implemented data processing method of claim 10, wherein the method further comprises analyzing the one or more images to identify the first information. ### Claim 20 (depends on 19) The computer-implemented data processing method of claim 19, wherein the method further comprises analyzing the one or more images to identify the privacy campaign.