Richard O Daniel

US Patent:

20220286482, Sep 8, 2022

Filed:

May 20, 2022

Appl. No.:

17/749732

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

H04L 9/40
G06Q 10/06

Abstract:

In various embodiments, a data map generation system is configured to receive a request to generate a privacy-related data map for particular computer code, and, at least partially in response to the request, determine a location of the particular computer code, automatically obtain the particular computer code based on the determined location, and analyze the particular computer code to determine privacy-related attributes of the particular computer code, where the privacy-related attributes indicate types of personal information that the particular computer code collects or accesses. The system may be further configured to generate and display a data map of the privacy-related attributes to a user.

US Patent:

20220237538, Jul 28, 2022

Filed:

Apr 18, 2022

Appl. No.:

17/722643

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Kevin Jones - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

G06Q 10/06
G06F 21/62
G06F 21/57
G06F 21/55
G06F 15/76

Abstract:

In various embodiments, a system may be configured to substantially automatically determine whether to take one or more actions in response to one or more identified risk triggers (e.g., data breaches, regulation change, etc.). The system may, for example: (1) compare the potential risk trigger to one or more previous risks triggers experienced by the particular entity at a previous time; (2) identify a similar previous risk trigger (e.g., one or more previous risk triggers related to a similar change in regulation, breach of data, type of issue identified, etc.); (3) determine the relevance of the current risk trigger based at least in part on a determined relevance of the previous risk trigger; and (4) determine whether to take one or more actions to the current risk trigger based at least in part on one or more determined actions to take in response to the previous, similar risk trigger.

US Patent:

20220229856, Jul 21, 2022

Filed:

Apr 1, 2022

Appl. No.:

17/711331

Inventors:

- Atlanta GA, US
Kabir A. Barday - Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

G06F 16/28
H04L 9/40
G06N 20/00
G06F 16/25
G06F 21/55
G06F 15/76
G06Q 10/06
H04L 67/306
H04W 12/02
G06F 40/186

Abstract:

Data processing systems and methods according to various embodiments are adapted for automatically detecting and documenting privacy-related aspects of computer software. Particular embodiments are adapted for: (1) automatically scanning source code to determine whether the source code include instructions for collecting personal data; and (2) facilitating the documentation of the portions of the code that collect the personal data. For example, the system may automatically prompt a user for comments regarding the code. The comments may be used, for example, to populate: (A) a privacy impact assessment; (B) system documentation; and/or (C) a privacy-related data map. The system may comprise, for example, a privacy comment plugin for use in conjunction with a code repository.

US Patent:

20210344720, Nov 4, 2021

Filed:

May 31, 2021

Appl. No.:

17/334948

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

H04L 29/06
G06Q 10/06

Abstract:

In various embodiments, a data map generation system is configured to receive a request to generate a privacy-related data map for particular computer code, and, at least partially in response to the request, determine a location of the particular computer code, automatically obtain the particular computer code based on the determined location, and analyze the particular computer code to determine privacy-related attributes of the particular computer code, where the privacy-related attributes indicate types of personal information that the particular computer code collects or accesses. The system may be further configured to generate and display a data map of the privacy-related attributes to a user.

US Patent:

20210303603, Sep 30, 2021

Filed:

Jun 14, 2021

Appl. No.:

17/346586

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

G06F 16/28
H04L 29/06
G06N 20/00
G06F 16/25
H04W 12/02
G06F 15/76
G06Q 10/06
H04L 29/08
G06F 21/55
G06F 40/186

Abstract:

In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). For example, a first data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc.

US Patent:

20210294906, Sep 23, 2021

Filed:

May 31, 2021

Appl. No.:

17/334939

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Kevin Jones - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

G06F 21/57
G06F 21/62
G06F 21/64

Abstract:

In various embodiments, a Data Model Adaptive Execution System may be configured to take one or more suitable actions to remediate an identified risk in view of one or more regulations (e.g., one or more legal regulations, one or more binding corporate rules, etc.). For example, in order to ensure compliance with one or more standards related to the collection and/or storage of personal data, an entity may be required to modify one or more aspects of a way in which the entity collects, stores, and/or otherwise processes personal data (e.g., in response to a change in a legal or other requirement). In order to identify whether a particular change or other risk trigger requires remediation, the system may be configured to assess a relevance of the risk posed by the risk and identify one or more processing activities or data assets that may be affected by the risk.

US Patent:

20210256161, Aug 19, 2021

Filed:

May 3, 2021

Appl. No.:

17/306438

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

G06F 21/62
G06F 15/76
G06F 21/55
G06N 20/00

Abstract:

In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include any entity that collects, processes, contains, and/or transfers personal data (e.g., a software application, database, website, server, etc.). A data asset may include any software or device (e.g., server or servers) utilized by a particular entity for such data collection, processing, transfer, storage, etc. The system may then utilize the generated model to fulfil a data subject access request.

US Patent:

20210258351, Aug 19, 2021

Filed:

Apr 5, 2021

Appl. No.:

17/222523

Inventors:

- Atlanta GA, US
Mihir S. Karanjkar - Marietta GA, US
Steven W. Finch - Kennesaw GA, US
Ken A. Browne - Johns Creek GA, US
Nathan W. Heard - Marietta GA, US
Aakash H. Patel - Norcross GA, US
Jason L. Sabourin - Brookhaven GA, US
Richard L. Daniel - Atlanta GA, US
Jonathan Blake Brannon - Smyrna GA, US

Assignee:

OneTrust, LLC - Atlanta GA

International Classification:

H04L 29/06
G06Q 10/06

Abstract:

In particular embodiments, a data processing data inventory generation system is configured to: (1) generate a data model (e.g., a data inventory) for one or more data assets utilized by a particular organization; (2) generate a respective data inventory for each of the one or more data assets; and (3) map one or more relationships between one or more aspects of the data inventory, the one or more data assets, etc. within the data model. In particular embodiments, a data asset (e.g., data system, software application, etc.) may include, for example, any entity that collects, processes, contains, and/or transfers personal data (e.g., such as a software application, “internet of things” computerized device, database, website, data-center, server, etc.). The system may be configured to identify particular data assets and/or personal data in data repositories using any suitable intelligent identity scanning technique.