Systems and methods for tracking data protection compliance of entities that use personally identifying information (pii)

A computer-implemented method for tracking data protection compliance of a plurality of entities using a data management computing system comprising a data management (“DM”) server in communication with a user computing device associated with a user and a requesting entity, the DM server comprising at least one processor communicatively coupled to a memory device, the method comprising:

• storing, in the memory device, a user profile associated with the user, wherein the memory device includes a records database, the records database including a plurality of compliance records generated by the DM server to track interactions between the DM server and the requesting entity;
• receiving, by the DM server, from the requesting entity, a personally identifying information (“PII”) consent request for access to a requested PII set of the user, the PII consent request identifying a reason code associated with the requested PII set;
• determining, based on the PII consent request, at least one PII item associated with the reason code;
• comparing, by the DM server, the at least one PII item to the requested PII set;
• generating, by the DM server, based on the comparison, a consent recommendation, wherein the consent recommendation provides a course of action regarding the at least one PII item;
• transmitting, by the DM server, the consent recommendation to the user computing device;
• receiving, by the DM server, from the user computing device, in response to the consent recommendation, a response indicating user consent for the requesting entity to access the at least one PII item;
• transmitting, by the DM server, to the requesting entity, a notification indicating the user consent for the requesting entity to retrieve the at least one PII item from a third-party PII storage entity;
• and
• updating, in the memory device, the user profile to track the requesting entity with the at least one PII item.

At least one non-transitory computer-readable storage media that includes computer-executable instructions for tracking data protection compliance of a plurality of entities using a data management computing system comprising a data management (“DM”) server in communication with a user computing device associated with a user and a requesting entity, wherein when executed by the DM server, the computer-executable instructions cause the DM server to:

• store a user profile associated with the user;
• store a records database, the records database including a plurality of compliance records generated by the DM server to track interactions between the DM server and the requesting entity;
• receive, from the requesting entity, a personally identifying information (“PII”) consent request for access to a requested PII set of the user, the PII consent request identifying a reason code associated with the requested PII set;
• determine, based on the PII consent request, at least one PII item associated with the reason code;
• compare the at least one PII item to the requested PII set;
• generate, based on the comparison, a consent recommendation, wherein the consent recommendation provides a course of action regarding the at least one PII item;
• transmit the consent recommendation to the user computing device;
• receive, from the user computing device, in response to the consent recommendation, a response indicating user consent for the requesting entity to access the at least one PII item;
• transmit, to the requesting entity, a notification indicating the user consent for the requesting entity to retrieve the at least one PII item from a third-party PII storage entity;
• and
• update the user profile to track the requesting entity with the at least one PII item.