Data processing systems and methods for generating personal data inventories for organizations and other entities

A computer-implemented data processing method for automatically generating an inventory of personal data stored by a particular organization, the data processing method comprising:

• for each of a plurality of particular privacy campaigns:
• receiving, via a computer user interface, a command to create an electronic record for the particular privacy campaign;
• in response to receiving the command, creating an electronic record for the particular privacy campaign and digitally storing the record in memory;
• presenting, on one or more computer user interfaces, a plurality of prompts for the input of data mapping data related to the privacy campaign;
• electronically receiving data mapping data input by one or more users, wherein the data mapping data comprises:
• a description of the campaign;
• one or more types of personal data related to the campaign;
• identifying information of a subject from which the personal data was collected;
• information indicating one or more locations in computer memory where the personal data is to be stored;
• and
• identifying information for one or more individuals who will have access to the personal data;
• processing the data mapping data by electronically associating the data mapping data with the record for the particular privacy campaign;
• and
• digitally storing, in memory, the data mapping data associated with the record for the particular campaign;
• receiving a request, from a user, to display an inventory of personal data for the particular organization that includes the data mapping data for each of the plurality of particular campaigns;
• and
• in response to receiving the request to display the inventory of personal data for the particular organization that includes the data mapping data for each of the plurality of particular campaigns, displaying, on a display screen, the inventory of personal data for the particular organization.

A computer-implemented data processing method for embedding a subset of prompts for information describing data mapping data in a set of prompts that comprises a plurality of prompts for information describing non-data mapping data in relation to a privacy campaign for a particular organization, the data processing method comprising:

• electronically receiving, by one or more computer processors, a request to initiate the privacy campaign;
• initiating, by one or more computer processors, a privacy impact assessment in response to the request to initiate the privacy campaign, the privacy impact assessment including a plurality of prompts requesting non-data mapping data, wherein the non-data mapping data is data that is not selected from a group consisting of:
• a descriptor of the particular privacy campaign;
• one or more types of personal data to be acquired or used during the campaign;
• one or more locations in computer memory where personal data is stored;
• and
• identifying information for one or more individuals who will have access to the personal data;
• embedding a subset of prompts for information requesting data mapping data in a set of prompts that comprises the plurality of prompts requesting non-data mapping data, wherein the data mapping data comprises at least one of a group of data consisting of:
• a descriptor of the particular privacy campaign;
• one or more types of personal data to be acquired or used during the campaign;
• one or more locations in computer memory where personal data is stored;
• and
• identifying information for one or more individuals who will have access to the personal data;
• generating, by one or more computer processors, the privacy impact assessment to be provided on one or more computer user interfaces, the privacy impact assessment including the plurality of prompts for information requesting non-data mapping data and the subset of prompts requesting data mapping data;
• and
• displaying, by one or more computer processors, the privacy impact assessment, via one or more computer user interfaces, in order to facilitate the input of privacy data in response to the plurality of prompts for information describing non-data mapping data and the subset of prompts for information describing data mapping data.

A computer-implemented data processing method for automatically generating an inventory of personal data stored by a particular organization, the data processing method comprising:

• receiving, by one or more computer processors, template design data, the template design data comprising a plurality of prompts for input for use in a template of privacy impact assessment questions, the plurality of prompts for input comprising:
• one or more prompts for an input of data mapping data;
• and
• one or more prompts for an input of non-data-mapping data;
• at least partially in response to receiving the template design data, generating a privacy impact assessment template that includes both:
• (A) the one or more prompts for an input of data mapping data;
• and (B) the one or more prompts for an input of non-data mapping data;
• flagging, in computer memory, each of the one or more prompts for input of data mapping data as a data mapping question;
• communicating the privacy impact assessment template to one or more users;
• after communicating the privacy impact assessment template to one or more users, receiving respective answer data from the one or more users in response to:
• (A) each of the one or more prompts for input of data mapping data;
• and (B) each of the one or more prompts for input of non-data mapping data;
• saving the answer data to computer memory so that each respective answer is associated in computer memory with its respective question as a question/answer pairing;
• after saving the answer data to computer memory, receiving a request to generate a personal data inventory for the particular organization;
• at least partially in response to receiving the request to generate the personal data inventory:
• using the flagged status of each of the one or more prompts for input of data mapping data to identify the one or more prompts for input of data mapping data as data mapping questions;
• in response to identifying at least a particular one of the prompts for input of data mapping data as a data mapping question, determining to include a particular one of the plurality of saved question/answer pairings that corresponds to the particular prompt for data mapping data in the personal data inventory;
• and
• generating the personal data inventory so that the personal data inventory includes the particular saved question/answer pairing that corresponds to the particular prompt for data mapping data.