Data processing systems and communication systems and methods for the efficient generation of privacy risk assessments

A non-transitory computer-readable storage medium comprising computer-executable instructions for performing a privacy audit for a privacy campaign, the computer-executable instructions comprising instructions for:

• determining, by one or more computer processors, one or more of risk factors for a privacy campaign;
• calculating, by one or more computer processors, a risk value for the privacy campaign based at least in part on the one or more risk factors;
• determining, by one or more computer processors, a privacy audit schedule for the privacy campaign based at least in part on the risk value for the privacy campaign, wherein the privacy audit schedule comprises a first audit time interval;
• receiving, by one or more computer processors, a request to modify the privacy audit schedule for the privacy campaign;
• at least partially in response to receiving the request to modify the privacy audit schedule for the privacy campaign, determining, by one or more computer processors, whether authorization of user modification of the privacy audit schedule for the privacy campaign is required;
• at least partially in response to determining that the authorization of the user modification of the privacy audit schedule for the privacy campaign is required, generating, by one or more computer processors, a graphical user interface comprising a user-selectable control that, when activated, automatically generates a request for the authorization of the user modification of the privacy audit schedule for the privacy campaign;
• presenting, by one or more computer processors on a display device, the graphical user interface;
• receiving, by one or more computer processors, a response to the request for the authorization of the user modification of the privacy audit schedule for the privacy campaign;
• determining, by one or more computer processors, whether the response comprises the authorization of the user modification of the privacy audit schedule for the privacy campaign;
• at least partially in response to determining that the response does not comprise the authorization of the user modification of the privacy audit schedule for the privacy campaign:
• retaining, by one or more computer processors, the privacy audit schedule for the privacy campaign;
• and
• periodically initiating, by one or more computer processors, an audit of the privacy campaign based at least in part on the privacy audit schedule for the privacy campaign;
• and
• at least partially in response to determining that the response comprises the authorization of the user modification of the privacy audit schedule for the privacy campaign:
• soliciting, by one or more computer processors, a second audit time interval;
• receiving, by one or more computer processors, the second audit time interval;
• generating, by one or more computer processors, a modified privacy audit schedule for the privacy campaign using the second audit time interval;
• and
• periodically initiating, by one or more computer processors, an audit of the privacy campaign based at least in part on the modified privacy audit schedule for the privacy campaign.

A data processing computer system for performing a privacy audit for a privacy campaign, the data processing computer system comprising:

• one or more computer processors;
• and
• a computer memory comprising a non-transitory computer-readable medium that stores computer-executable instructions that, when executed by the one or more computer processors, cause the one or more computer processors to perform operations comprising:
• determining one or more of risk factors for a privacy campaign;
• determining a relative risk rating for each of the one or more of risk factors;
• determining a weighting factor for each of the one or more of risk factors;
• calculating a risk value for the privacy campaign based at least in part on the relative risk rating for each of the one or more of risk factors and the weighting factor for each of the one or more of risk factors;
• determining a privacy audit schedule for the privacy campaign based at least in part on the risk value for the privacy campaign;
• receiving a request to modify the privacy audit schedule for the privacy campaign;
• at least partially in response to receiving the request to modify the privacy audit schedule for the privacy campaign, determining whether authorization of user modification of the privacy audit schedule for the privacy campaign is required;
• at least partially in response to determining that the authorization of the user modification of the privacy audit schedule for the privacy campaign is required, generating a graphical user interface comprising a user-selectable control that, when activated, automatically generates a request for the authorization of the user modification of the privacy audit schedule for the privacy campaign;
• presenting the graphical user interface to a user on a display device;
• receiving an indication of the authorization of the user modification of the privacy audit schedule for the privacy campaign;
• at least partially in response to receiving the authorization of the user modification of the privacy audit schedule for the privacy campaign, soliciting one or more user modifications to the privacy audit schedule for the privacy campaign from the user;
• receiving the one or more user modifications to the privacy audit schedule for the privacy campaign;
• generating, based at least in part on the user modifications to the privacy audit schedule for the privacy campaign, a modified privacy audit schedule for the privacy campaign;
• and
• periodically initiating an audit of the privacy campaign based at least in part on the modified privacy audit schedule for the privacy campaign.