Consent Receipt Management System for Automated Process Blocking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack effective methods for managing personal data consent and compliance with privacy and security policies, particularly in handling sensitive personal data and ensuring valid consent for data processing activities.

Innovation Solution

A computer-implemented data processing method and system for managing consent receipts, which includes providing a user interface for initiating transactions, generating unique consent keys, storing and associating identifiers, and transmitting consent records to data subjects, along with features for scanning webpages, capturing user interfaces, and managing cookie consent interfaces to optimize consent processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual consent management processes are used, then implementation simplicity is maintained, but compliance reliability with privacy and security policies deteriorates

Engineering Contradiction:
Improvecompliance reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a consent management system as an intermediary between data subjects and organizations. This system automatically generates consent receipts, tracks consent status, and manages consent data, thereby ensuring compliance with privacy and security policies without requiring complex manual processes throughout the organization.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The consent management system enables automated self-service functionality where consent receipts are automatically generated, stored, and retrieved without manual intervention. The system autonomously tracks consent status and manages consent data, reducing the need for complex human-managed processes while maintaining high compliance reliability.

Inventive Principle:
Principle #25Self-service

2Reliability

If comprehensive consent tracking is implemented, then compliance reliability improves, but processing time increases

Engineering Contradiction:
Improveconsent validation reliabilityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by automatically generating and storing consent receipts at the time consent is obtained. Consent status is pre-validated and stored in a readily accessible format, eliminating the need for time-consuming manual verification processes later when consent validation is required.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates digital copies of consent information in structured formats (consent receipts) that can be quickly retrieved and validated. These copies contain all necessary consent data in a standardized format, enabling rapid verification without requiring access to original complex documentation or manual record-seeking processes.

Inventive Principle:
Principle #26Copying

3Productivity

If automated consent management systems are deployed, then productivity improves, but device complexity increases

Engineering Contradiction:
Improveconsent processing productivityVSAvoidsystem architecture complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The consent management system is designed as a universal multi-functional platform that handles consent receipt generation, storage, retrieval, validation, and status tracking across multiple organizations and data subjects. This consolidates what would otherwise require multiple separate systems into a single unified solution, improving productivity without proportionally increasing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10726158B2Consent receipt management and automated process blocking systems and related methods
Publication Date: 2020.07.28 ONETRUST LLC
  • US10726158B2 patent drawing
  • US10726158B2 patent drawing
  • US10726158B2 patent drawing

AI summary

An automated process blocking system may be configured to automatically block one or more processes based on received user consent data. For example, a particular data subject may provide consent for an entity to process particular data associated with the data subject for one or more particular purposes. The system may be configured to: (1) determine that one or more entity systems are processing one or more pieces of personal data associated with a data subject; (2) identify at least one process for which the one or more pieces of personal data are being processed; (3) determine, using a consent receipt management system, whether the data subject has provided consent for the processing of the one or more pieces of personal data for the at least one process; and (4) in response to determining that the data subject has not provided valid consent, automatically blocking the processing.