Patent Document ID: 10026110
Application ID: 15619469
Patent Flag: 1

Claim One:
1. A computer-implemented data processing method for automatically generating an inventory of personal data stored by a particular organization, the data processing method comprising, for each of a plurality of particular privacy campaigns: presenting, on one or more computer user interfaces, a plurality of prompts for the input of data mapping data related to the particular privacy campaign, wherein each of the plurality of particular privacy campaigns utilizes personal data collected from one or more persons or one or more entities; electronically receiving the data mapping data via input by one or more users, wherein the data mapping data comprises: a descriptor of the particular privacy campaign; an identification of one or more types of particular personal data to be acquired or used during the privacy campaign; data indicating one or more locations in computer memory where the particular personal data is to be stored; and data identifying one or more particular types of individuals who will have access to the particular personal data; processing the data mapping data by electronically associating the data mapping data with a record for the particular privacy campaign; digitally storing, in memory, the data mapping data associated with the record for the particular campaign; determining, based at least in part on the data mapping data, a risk value associated with the privacy campaign, wherein determining the risk value comprises: electronically retrieving, from memory, the data mapping data associated with the record for the privacy campaign; electronically determining a weighting factor for each of a plurality of risk factors, wherein the plurality of the risk factors comprises: the descriptor of the particular privacy campaign; the identification of one or more type of particular personal data to be acquired or used during the privacy campaign; the data indicating one or more locations in computer memory where the particular personal data is to be store; and the data identifying one or more particular types of individual who will have access to the particular personal data; electronically determining a relative risk rating for each of the plurality of risk factors; and electronically calculating a risk value for the privacy campaign based upon, for each respective one of the plurality of risk factors, the relative risk rating for the respective risk factor and the weighting factor for the respective risk factor; and storing the risk value in computer memory, wherein the computer-implemented data processing method further comprises: receiving, via a user interface, a request to generate an inventory of personal data for the particular organization; and in response to receiving the request, generating the requested inventory of personal data for the particular organization, wherein the requested inventory comprises the data mapping data for each of the plurality of particular privacy campaigns.