US 11,921,894 B2
Data processing systems for generating and populating a data inventory for processing data access requests
Kabir A. Barday, Atlanta, GA (US); Mihir S. Karanjkar, Marietta, GA (US); Steven W. Finch, Kennesaw, GA (US); Ken A. Browne, Johns Creek, GA (US); Nathan W. Heard, Marietta, GA (US); Aakash H. Patel, Norcross, GA (US); Jason L. Sabourin, Brookhaven, GA (US); Richard L. Daniel, Atlanta, GA (US); Dylan D. Patton-Kuhl, Atlanta, GA (US); and Jonathan Blake Brannon, Smyrna, GA (US)
Assigned to OneTrust, LLC, Atlanta, GA (US)
Filed by OneTrust, LLC, Atlanta, GA (US)
Filed on May 3, 2021, as Appl. No. 17/306,438.
Application 17/306,438 is a continuation of application No. 16/595,327, filed on Oct. 7, 2019, granted, now 10,997,318.
Application 16/595,327 is a continuation in part of application No. 16/221,153, filed on Dec. 14, 2018, granted, now 10,438,020, issued on Oct. 8, 2019.
Application 16/221,153 is a continuation of application No. 15/996,208, filed on Jun. 1, 2018, granted, now 10,181,051, issued on Jan. 15, 2019.
Application 15/996,208 is a continuation in part of application No. 15/853,674, filed on Dec. 22, 2017, granted, now 10,019,597, issued on Jul. 10, 2018.
Application 15/853,674 is a continuation in part of application No. 15/619,455, filed on Jun. 10, 2017, granted, now 9,851,966, issued on Dec. 26, 2017.
Application 15/619,455 is a continuation in part of application No. 15/254,901, filed on Sep. 1, 2016, granted, now 9,729,583, issued on Aug. 8, 2017.
Claims priority of provisional application 62/541,613, filed on Aug. 4, 2017.
Claims priority of provisional application 62/537,839, filed on Jul. 27, 2017.
Claims priority of provisional application 62/360,123, filed on Jul. 8, 2016.
Claims priority of provisional application 62/353,802, filed on Jun. 23, 2016.
Claims priority of provisional application 62/348,695, filed on Jun. 10, 2016.
Prior Publication US 2021/0256161 A1, Aug. 19, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/62 (2013.01); G06F 15/76 (2006.01); G06F 21/55 (2013.01); G06N 20/00 (2019.01)
CPC G06F 21/6254 (2013.01) [G06F 15/76 (2013.01); G06F 21/552 (2013.01); G06F 21/6227 (2013.01); G06N 20/00 (2019.01)] 17 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by computing hardware, a data subject access request for a particular organization to perform an action with regard to personal data the particular organization has obtained on a data subject;
accessing, by the computing hardware, a plurality of data models, wherein each data model of the plurality of data models (1) maps a respective data inventory to a corresponding data asset of a plurality of data assets, (2) the respective data inventory comprises a plurality of inventory attributes for the corresponding data asset, and (3) each data asset of the plurality of data assets comprises at least one of software or a hardware device used by the particular organization for at least one of collecting, processing, transferring, or storing the personal data;
scanning the plurality of inventory attributes for each respective data inventory for the corresponding data asset of the plurality of data assets using identifying data for the data subject to identify a subset of data assets used in at least one of collecting, processing, transferring, or storing the personal data for the data subject from the plurality of data assets; and
responsive to identifying the subset of data assets using the personal data for the data subject, having the action performed for the personal data utilized by the subset of data assets identified by scanning the plurality of inventory attributes for each respective data inventory for the corresponding data asset of the plurality of data assets, wherein having the action performed comprises initiating network communications with or processing operations on each of the subset of data assets to at least one of access, modify, or delete the personal data at each of the subset of data assets.