US 2021/0240849 A1Published application

Data processing systems and methods for populating and maintaining a centralized database of personal data

AssigneeOneTrust, LLC

InventorsKabir A. Barday, Jonathan Blake Brannon, Jason L. Sabourin, Mihir S. Karanjkar, Kevin Jones, Richard A. Beaumont

Life of this patent

Estimating the term…

patentgrep

Loading patent…

Abstract

A centralized data repository system, in various embodiments, is configured to provide a central data-storage repository (e.g., one or more servers, databases, etc.) for the centralized storage of personally identifiable information (PII) and/or personal data for one or more particular data subjects. In particular embodiments, the centralized data repository may enable the system to populate one or more data models (e.g., using one or more suitable techniques described above) substantially on-the-fly (e.g., as the system collects, processes, stores, etc. personal data regarding a particular data subject). In this way, in particular embodiments, the system is configured to maintain a substantially up-to-date data model for a plurality of data subjects (e.g., each particular data subject for whom the system collects, processes, stores, etc. personal data).

Claims20

Dependent claims

A method comprising:

receiving, by computing hardware, an indication that a first party data system has collected, stored, or processed a new piece of personal data;
identifying, by computing hardware, a data subject associated with the new piece of personal data;
identifying, by computing hardware, based at least in part on the new piece of personal data, a processing activity associated with the new piece of personal data;
generating, by computing hardware, based at least in part on the processing activity, a unique transaction identifier;
receiving, by computing hardware from a consent receipt management system, an indication that the data subject has not provided valid consent for processing the new piece of personal data by the processing activity;
at least partially in response to the indication that the data subject has not provided the valid consent for processing the new piece of personal data by the processing activity, obtaining, by computing hardware, a unique consent receipt key from the consent receipt management system;
associating, by computing hardware in computer memory, the unique consent receipt key with the data subject and with the unique transaction identifier;
requesting, by computing hardware, from the data subject, consent for processing the new piece of personal data by the processing activity;
receiving, by computing hardware, from the data subject, the consent for processing the new piece of personal data by the processing activity;
and
at least partially in response to receiving the consent for processing the new piece of personal data by the processing activity:
transmitting, by computing hardware to the consent receipt management system, the unique consent receipt key and the unique transaction identifier, and
transmitting, by computing hardware to the centralized repository of personal data, the unique consent receipt key and the unique transaction identifier.

10 more elements

A system comprising:

computing hardware;
computer memory;
and
a non-transitory computer-readable medium storing computer-executable instructions that, when executed by the computing hardware, cause the computing hardware to perform operations comprising:
receiving a first indication that a data system has processed a new piece of personal data;
identifying a data subject and a processing activity associated with the new piece of personal data;
receiving a second indication from a consent receipt management system that the data subject has provided valid consent for processing the new piece of personal data;
in response to receiving the second indication, generating a unique consent receipt key based on a consent receipt associated with the valid consent;
determining a unique subject identifier for the data subject;
associating the unique consent receipt key with the unique subject identifier and the new piece of personal data in the computer memory;
and
transmitting the unique consent receipt key and the unique subject identifier to a centralized repository of personal data.

9 more elements

A non-transitory computer-readable medium storing computer-executable instructions that, when executed by computing hardware, configure the computing hardware to perform operations comprising for:

receiving, by computing hardware, a first indication that a data system has collected a new piece of personal data;
identifying, by computing hardware, a data subject associated with the new piece of personal data;
identifying, by computing hardware, a processing activity associated with the new piece of personal data;
receiving, by computing hardware, a consent receipt from the data subject;
receiving, by computing hardware, a second indication that the data subject has provided valid consent for processing the new piece of personal data by the processing activity;
in response to receiving the second indication, determining, by computing hardware, a unique consent receipt key based on the consent receipt;
determining, by computing hardware, a unique subject identifier for the data subject;
associating, by computing hardware in a computer memory, the unique consent receipt key with the unique subject identifier;
and
transmitting, by computing hardware, the unique consent receipt key and the unique subject identifier to a centralized repository of personal data along with the unique consent receipt key and the unique transaction identifier, one or more of:
(a) the new piece of personal data, and
(b) a third indication of a storage location of the new piece of personal data.

9 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/234,205Filed 19 Apr 2021
Priority: 10 Jun 2016
Published: 5 Aug 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F 16/22
Of structured data, e.g. relational data: indexing; Data structures therefor; Storage structures
G06F 16/2365
Updating: ensuring data consistency and integrity
G06F
Computing and data processing

Family

Application62/348,695Us provisional application · filed 10 Jun 2016
Application62/353,802Us provisional application · filed 23 Jun 2016
Application62/360,123Us provisional application · filed 8 Jul 2016
Application15/254,901Continuation in part · filed 1 Sep 2016
Application15/619,455Continuation in part · filed 10 Jun 2017
Application62/537,839Us provisional application · filed 27 Jul 2017
Application62/541,613Us provisional application · filed 4 Aug 2017
Application62/547,530Us provisional application · filed 18 Aug 2017
Application62/572,096Us provisional application · filed 13 Oct 2017
Application15/853,674Continuation in part · filed 22 Dec 2017
Application62/631,684Us provisional application · filed 17 Feb 2018
Application62/631,703Us provisional application · filed 17 Feb 2018
Application15/996,208Continuation in part · filed 1 Jun 2018
Application16/055,083Continuation in part · filed 4 Aug 2018
Application62/728,435Us provisional application · filed 7 Sep 2018
Application16/159,634Continuation in part · filed 13 Oct 2018
Application16/277,568Continuation in part · filed 15 Feb 2019
Application16/552,758Continuation · filed 27 Aug 2019
Application16/989,086Continuation · filed 10 Aug 2020
Application17/234,205Continuation
Application16/552,758Continuation in part
US 10,019,597 B2Related patent
US 10,181,051 B2Related patent
US 10,282,692 B2Related patent
US 10,289,870 B2Related patent
US 10,440,062 B2Related patent
US 10,740,487 B2Related patent
US 10,984,132 B2Related patent
US 11,409,908 B2Related patent
US 2017/0357502 A1Published application
US 2018/0137305 A1Published application
US 2018/0276415 A1Published application
US 2018/0341785 A1Published application
US 2019/0050766 A1Published application
US 2019/0215344 A1Published application
US 2019/0392170 A1Published application
US 2020/0372178 A1Published application
US 9,729,583 B1Related patent
US 9,851,966 B1Related patent
US 2021/0240849 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key