Automated Data Inventory System for Privacy Compliance

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

There is a growing need for improved systems and methods to manage personal data in compliance with privacy and security policies, as frequent breaches lead to unauthorized access and the need for better compliance with legal and industry requirements.

Innovation Solution

A data processing system that generates a data inventory by identifying primary and transfer data assets, storing inventory attributes, and electronically linking these assets to facilitate compliance with privacy and security policies, using processors and computer-readable media to execute instructions for data collection, storage, and transfer tracking.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If organizations implement manual data management processes to comply with privacy policies, then compliance awareness is improved, but operational efficiency deteriorates due to increased time and resource consumption

Engineering Contradiction:

Improvecompliance with privacy policiesVSAvoidoperational efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system enables automated self-service functionality where the data management system automatically discovers data assets, generates inventories, identifies PII, and maps data flows without requiring manual intervention for each task, thereby maintaining compliance while improving operational efficiency

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical processes (manual data inventory creation, manual PII identification, manual data flow mapping) with automated computer-based systems that use algorithms and processing instructions to perform these tasks, eliminating the need for manual labor while ensuring compliance

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If comprehensive data inventories are created to track all personal data assets, then compliance monitoring is improved, but system complexity increases due to additional data collection and management requirements

Engineering Contradiction:

Improvecompliance monitoringVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs multiple functions through a single integrated platform: data asset discovery, data inventory generation, PII identification, data flow mapping, and compliance reporting, thereby achieving comprehensive compliance monitoring without proportionally increasing system complexity

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The comprehensive data inventory is segmented into manageable components including data asset inventories, PII inventories, and data flow maps, each handled by specific modular processes that can be executed independently and combined to achieve complete compliance monitoring

Inventive Principle:

Principle #1Segmentation

3Adaptability or versatility

If manual processes are used to identify and map data flows between assets, then flexibility in handling diverse data scenarios is improved, but time consumption increases significantly

Engineering Contradiction:

Improvehandling diverse data scenariosVSAvoidtime consumption

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system replaces manual data flow mapping processes with automated computer-based discovery mechanisms that use processing instructions to identify and map data flows between assets, maintaining the ability to handle diverse scenarios while dramatically reducing time consumption

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system performs preliminary automated discovery and mapping of data assets and flows before compliance analysis is needed, so that when compliance monitoring is required, the foundational data structure is already in place, reducing the time needed for each compliance assessment

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS10970675B2Data processing systems for generating and populating a data inventory

Publication Date: 2021.04.06 ONETRUST LLC

AI summary

In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). For example, a first data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc.