Patent ID: 11921894
Assignee: ONETRUST LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 6:
7. A data subject access request processing system comprising;
computing hardware; and
a non-transitory computer-readable medium storing computer-executable instructions that, when executed by the computing hardware, cause the computing hardware to perform operations comprising:
receiving a data subject access request for a particular organization to perform an action with regard to personal data the particular organization has obtained on a data subject;
accessing a data model, wherein the data model (1) represents a first data asset and a second data asset, each of the first data asset and the second data asset comprising at least one of software or a hardware device used by the particular organization for at least one of collecting, processing, transferring, or storing the personal data, (2) maps a respective data inventory to each of the first data asset and the second data asset, and (3) the respective data inventory for each of the first data asset and the second data asset comprises a plurality of inventory attributes;
scanning the plurality of inventory attributes for the respective data inventory for the first data asset using identifying data for the data subject to identify a first piece of the personal data for the data subject being at least one of collected, processed, transferred, or stored by the first data asset;
scanning the plurality of inventory attributes for the respective data inventory for the second data asset using the first piece of the personal data to identify a second piece of the personal data for the data subject being at least one of collected, processed, transferred, or stored by the second data asset; and
responsive to identifying the first piece of the personal data and the second piece of the personal data for the data subject, having the action performed for the first piece of the personal data and the second piece of the personal data by:
initiating network communications with or processing operations on the first data asset to at least one of access, modify, or delete the first piece of the personal data at the first data asset identified by scanning the plurality of inventory attributes for the respective data inventory for the first data asset using the identifying data for the data subject; and
initiating network communications with or processing operations on the second data asset to at least one of access, modify, or delete the second piece of the personal data at the second data asset identified by scanning the plurality of inventory attributes for the respective data inventory for the second data asset using the first piece of the personal data.