Patent ID: 7966663

Claim:
A method utilizing a computer system for determining and facilitating compliance with privacy requirements of an information resource that uses personal information about an individual, comprising: identifying the information resource that uses personal information about the individual; collecting data relating to privacy issues about the information resource, including at least four of: data about privacy aspects of the information resource, data about a privacy notice related to the information resource, data about choice available to the individual, data about the individual's access to the personal information, data about redress available to the individual, data about third party access to the information resource, and data about information tools used by the information resource; storing the data related to privacy issues collected about the information resource in a database in the computer system; analyzing a privacy risk based on the collected data related to privacy issues for the information resource; and determining a privacy requirement for the information resource based on the collected data and the privacy risk utilizing a processor in the computer system.