Patent Document ID: 9892442
Application ID: 15619212

Base Claim:
1. A computer-implemented data processing method for efficiently assessing the risk associated with a privacy campaign, the method comprising: receiving, by one or more computer processors, a completed privacy template from a centralized repository of completed privacy templates, the completed privacy template comprising a plurality of question/answer pairings regarding a particular vendor, product or service to be used as part of the privacy campaign; after receiving the completed privacy template, receiving, from a user, a particular weighting factor that is to be applied to at least a particular one of the question/answer pairings in processing data to calculate a risk rating for the privacy campaign; after receiving the particular weighting factor, using the particular weighting factor and the content of the particular question/answer pairing to calculate a risk rating for the privacy campaign by: identifying a respective weighting factor for each of the plurality of question/answer pairings, wherein the plurality of question answer pairings identify at least: a nature of data collected by the particular vendor, product or service to be used as part of the privacy campaign; a physical storage location of the data collected by the particular vendor, product or service to be used as part of the privacy campaign; a number of individuals having access to the data collected by the particular vendor, product or service to be used as part of the privacy campaign; and a type of individual from which the data is collected by the particular vendor, product or service to be used as part of the privacy campaign; electronically determining a relative risk rating for each of the plurality of question/answer pairings; and electronically calculating the risk rating based upon, for each of the plurality of question/answer pairings, the relative risk rating and the weighting factor; determining whether the risk rating for the privacy campaign meets certain pre-determined criteria; and in response to determining that the risk rating for the privacy campaign does not satisfy the pre-determined criteria, generating an alert to a user indicating that the risk rating for the privacy campaign does not satisfy the pre-determined criteria.

---

Claim 2:
2. The computer-implemented data processing method of claim 1 , wherein: the particular weighting factor is a first weighting factor; the particular one of the question/answer pairings is a first particular one of the question/answer pairings; the risk rating for the privacy campaign is a first risk rating for the privacy campaign; and the system is further adapted for: receiving, by one or more computer processors, an updated version of the completed privacy template from the centralized repository of completed privacy templates, the updated completed privacy template comprising an updated plurality of question/answer pairings regarding the particular vendor, product or service; after receiving the updated completed privacy template, receiving, from a user, a second weighting factor that is to be applied to at least a specific one of the question/answer pairings in calculating a risk rating for the privacy campaign; after receiving the second weighting factor, using the second weighting factor and the content of the specific question/answer pairing to calculate a second risk rating for the privacy campaign; determining whether the second risk rating for the privacy campaign meets particular pre-determined criteria; and in response to determining that the second risk rating for the privacy campaign does not satisfy the particular pre-determined criteria, generating an alert to a user indicating that the second risk rating for the privacy campaign does not satisfy the particular pre-determined criteria.