Automated Data Subject Access Request Routing System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems are inadequate for timely and efficient processing of data subject access requests, particularly for large corporations that store data across multiple platforms, leading to challenges in complying with legal deadlines.
Innovation Solution
A computer-implemented method and system that receives and manages data subject access requests through webforms, automatically routes them to designated individuals, prioritizes requests based on metadata, and facilitates the deletion of personal data from various computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is stored across multiple platforms and locations for operational needs, then data availability and organizational functionality are improved, but the complexity and time required to locate and process data subject access requests increases
Solution Approach 1:
The patent segments the data storage system into multiple platforms and locations while implementing a centralized request management system that divides the processing workflow into distinct automated stages (identification, retrieval, compilation, response), allowing each segment to operate independently yet coordinate through the central system
Solution Approach 2:
The patent introduces an intermediary automated request management system that acts as a mediator between the distributed data storage platforms and the data subject, coordinating data location, retrieval, and response compilation across multiple platforms without requiring manual intervention at each location
2Device complexity
If manual processes are used to locate and fulfill data subject access requests across multiple platforms, then system simplicity is maintained, but processing time and resource requirements increase beyond legal deadlines
Solution Approach 1:
The patent implements self-service automation where the request management system automatically performs data location, retrieval, compilation, and response generation without requiring manual human intervention at each stage, enabling the system to serve itself in fulfilling data subject access requests within legal timeframes
Solution Approach 2:
The patent performs preliminary actions by pre-establishing automated pathways and protocols for data location and retrieval across multiple platforms, so that when a data subject access request is received, the system can immediately execute pre-planned retrieval operations rather than creating ad-hoc manual processes
3Productivity
If automated systems are implemented to process data subject access requests across multiple platforms, then processing speed and compliance are improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The patent creates a universal automated request management system that can interface with multiple different data storage platforms and types through standardized protocols, allowing a single multi-functional system to handle diverse data sources without requiring separate automated systems for each platform
Solution Approach 2:
The patent merges the functions of data location, retrieval, verification, and response compilation into a single integrated automated system that operates as a unified process, combining multiple discrete tasks into one cohesive automated workflow that reduces overall system complexity compared to separate systems for each function
4Measurement precision
If extensive manual review and verification are performed on data subject access requests, then response accuracy is improved, but processing time exceeds legal deadlines
Solution Approach 1:
The patent implements feedback mechanisms where the automated system continuously verifies data retrieval accuracy through systematic checks and validations at each processing stage, with automated correction protocols that provide immediate feedback and adjustment without requiring extensive manual review
Solution Approach 2:
The patent replaces manual review and verification processes with automated electronic verification systems that use algorithmic validation, digital signatures, and automated compliance checking to ensure data accuracy and legal compliance without the time requirements of human manual review
Data Source
AI summary
In various embodiments, before a data subject request can be processed, the data subject's identity may need to be verified. In various embodiments, the system provides a mechanism to automatically detect the type of authentication required for a particular data subject based on the type of Data Subject Access Request being made and automatically issues a request to the data subject to verify their identity against that form of identification. For example, a subject rights request might only require two types of authentication, but a deletion request may require four types of data to verify authentication. The system may automatically detect which is type of authentication is required based on the DSAR and send an appropriate request to the data subject to verify their identity.