Consent Receipt Management System for Privacy Compliance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack effective methods for managing consent receipts in transactions involving personal data, leading to inadequate compliance with privacy and security policies, and there is a need for improved systems to handle consent management and data subject access requests.

Innovation Solution

A computer-implemented data processing method and system for managing consent receipts, which includes providing a user interface for initiating transactions, generating unique consent receipt keys, storing and associating subject identifiers, transaction identifiers, and transmitting consent receipts to data subjects, while also enabling data subject access requests and inventory generation for personal data assets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual consent tracking methods are used, then system complexity is reduced, but compliance reliability deteriorates

Engineering Contradiction:
Improvecompliance reliabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a consent receipt management system that acts as an intermediary between data subjects and organizations. This system automatically generates consent receipts, tracks consent status, and manages consent data, thereby ensuring compliance reliability without requiring complex manual tracking processes throughout the entire organization.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The consent receipt management system enables self-service functionality where data subjects can access, view, and manage their own consent receipts through user interfaces. This automated self-management approach ensures compliance reliability while reducing the need for complex administrative oversight systems.

Inventive Principle:
Principle #25Self-service

2Reliability

If comprehensive consent tracking is implemented, then compliance reliability improves, but data processing time increases

Engineering Contradiction:
Improvecompliance reliabilityVSAvoiddata processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by automatically generating consent receipts at the moment consent is obtained, rather than requiring later manual documentation. The consent receipt is created and stored immediately with all necessary consent data, eliminating time-consuming retrospective tracking and documentation processes.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces manual mechanical tracking processes with automated electronic systems. The consent receipt management system automatically generates, stores, and retrieves consent data electronically, substituting time-consuming manual tracking and documentation with instant automated digital processes.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If consent receipt management system is implemented, then compliance reliability improves, but device complexity increases

Engineering Contradiction:
Improvecompliance reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The consent receipt management system is designed as a universal multi-functional platform that can serve multiple purposes: generating consent receipts, tracking consent status, managing data subject access requests, and maintaining consent records. This consolidates multiple compliance functions into a single system, reducing overall device complexity while maintaining high compliance reliability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10776518B2Consent receipt management systems and related methods
Publication Date: 2020.09.15 ONETRUST LLC
  • US10776518B2 patent drawing
  • US10776518B2 patent drawing
  • US10776518B2 patent drawing

AI summary

A consent receipt management system may, for example, be configured to track data on behalf of an entity that collects and/or processes persona data related to: (1) who consented to the processing or collection of personal data; (2) when the consent was given (e.g., a date and time); (3) what information was provided to the consenter at the time of consent (e.g., a privacy policy, what personal data would be collected following the provision of the consent, for what purpose that personal data would be collected, etc.); (4) how consent was received (e.g., one or more copies of a data capture form, webform, etc. via which consent was provided by the consenter); (5) when consent was withdrawn (e.g., a date and time of consent withdrawal if the consenter withdraws consent); and/or (6) any other suitable data related to receipt or withdrawal of consent.