US 2021/0344720 A1 · DATA PROCESSING SYSTEMS AND METHODS FOR PERFORMING PRIVACY ASSESSMENTS AND MONITORING OF NEW VERSIONS OF COMPUTER CODE FOR PRIVACY COMPLIANCE

Abstract

In various embodiments, a data map generation system is configured to receive a request to generate a privacy-related data map for particular computer code, and, at least partially in response to the request, determine a location of the particular computer code, automatically obtain the particular computer code based on the determined location, and analyze the particular computer code to determine privacy-related attributes of the particular computer code, where the privacy-related attributes indicate types of personal information that the particular computer code collects or accesses. The system may be further configured to generate and display a data map of the privacy-related attributes to a user.

Claims20

Dependent claims

A method comprising:

monitoring, by computing hardware, a location where computer code is located;
identifying, by the computing hardware, a new instance of the computer code at the location;
comparing, by the computing hardware, the new instance of the computer code with a previous instance of the computer code to identify a change has been made to the computer code;
responsive to identifying the change, analyzing, by the computing hardware, the new instance of the computer code to determine a privacy-related attribute of the new instance of the computer code, the privacy-related attribute indicating a type of personal information that the new instance of the computer code at least one of collects or accesses;
modifying, by the computing hardware, a data map representing processing of the personal information to reflect the privacy-related attribute identified for the new instance of the computer code;
and
providing, by the computing hardware, the data map for display to a user.

4 more elements

A system comprising:

a non-transitory computer-readable medium storing instructions;
and
a processing device communicatively coupled to the non-transitory computer-readable medium,
wherein, the processing device is configured to execute the instructions and thereby perform operations, upon a new instance of a computer code being identified at a location being monitored where the computer code is located, comprising:
comparing the new instance of the computer code with a previous instance of the computer code to identify a change has been made to the computer code;
responsive to identifying the change, analyzing the new instance of the computer code to determine a privacy-related attribute of the new instance of the computer code, the privacy-related attribute indicating a type of personal information that the new instance of the computer code at least one of collects or accesses;
modifying a data map representing processing of the personal information to reflect the privacy-related attribute identified for the new instance of the computer code;
and
providing the data map for display to a user.

6 more elements

A non-transitory computer-readable medium storing computer-executable instructions that, when executed by processing hardware, configure the processing hardware to perform operations, upon a new instance of a computer code being identified at a location being monitored where the computer code is located, comprising:

comparing the new instance of the computer code with a previous instance of the computer code to identify a change has been made to the computer code;
responsive to identifying the change, analyzing the new instance of the computer code to determine a privacy-related attribute of the new instance of the computer code, the privacy-related attribute indicating a type of personal information that the new instance of the computer code at least one of collects or accesses;
and
modifying a data map representing processing of the personal information to reflect the privacy-related attribute identified for the new instance of the computer code, wherein the data map is provided for display to a user.

1 more element

Dependencies are inferred from the claim text.

Facts

Application

17/334,948Filed 31 May 2021

Priority

10 Jun 2016

Published

4 Nov 2021

Term ends

Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06Q 10/0635
Operations research, analysis or management: risk analysis of enterprise or organisation activities
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06Q 10/06
Administration; Management: resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation…
G06Q 10/10
Administration; Management: office automation; Time management

Family

Application62/348,695Us provisional application · filed 10 Jun 2016

Application62/353,802Us provisional application · filed 23 Jun 2016

Application62/360,123Us provisional application · filed 8 Jul 2016

Application15/254,901Division · filed 1 Sep 2016

Application62/537,839Us provisional application · filed 27 Jul 2017

Application15/671,073Continuation · filed 7 Aug 2017

Application15/883,041Continuation in part · filed 29 Jan 2018

Application16/041,468Continuation · filed 20 Jul 2018

Application16/404,405Continuation · filed 6 May 2019

Application16/798,818Continuation in part · filed 24 Feb 2020

Application17/034,355Continuation in part · filed 28 Sep 2020