| CPC G06F 21/6263 (2013.01) [G06F 15/76 (2013.01); G06F 21/552 (2013.01); G06F 21/577 (2013.01); G06F 21/604 (2013.01); G06Q 10/1053 (2013.01); H04L 63/108 (2013.01); G06F 16/95 (2019.01)] | 20 Claims |

|
1. A method comprising:
receiving, by computing hardware via a graphical user interface, information regarding a request to initiate a transaction between an entity and a data subject,
wherein the transaction involves a computing system associated with the entity performing at least one of collecting or processing personal data associated with the data subject as part of a processing activity undertaken by the entity that the data subject provides consent as part of the transaction;
receiving, by the computing hardware, a unique transaction identifier associated with the transaction;
receiving, by the computing hardware, a unique subject identifier for the data subject;
responsive to receiving the information regarding the request:
generating, by the computing hardware, a unique consent receipt key for the consent provided by the data subject as part of the transaction;
associating, by the computing hardware, a receipt definition with the unique consent receipt key, wherein the receipt definition comprises the unique transaction identifier and a purpose for the at least one of collecting or processing the personal data, wherein the personal data is identified using one or more machine learning techniques; and
generating, by the computing hardware, a consent receipt set comprising the unique subject identifier, the unique consent receipt key, and the unique transaction identifier;
storing, by the computing hardware in computer memory, the consent receipt set and the receipt definition;
detecting, by the computing hardware and based on data in the receipt definition, an occurrence of a triggering event that causes the consent to expire according to the association of the receipt definition with the unique consent receipt key; and
responsive to detecting the occurrence of the triggering event, causing, by the computing hardware, a recapture of the consent from the data subject.
|