BACKGROUND

Over the past years, privacy and security policies, and related operations have become increasingly important. Breaches in security, leading to the unauthorized access of personal data (which may include sensitive personal data) have become more frequent among companies and other organizations of all sizes. Such personal data may include, but is not limited to, personally identifiable information (PII), which may be information that directly (or indirectly) identifies an individual or entity. Examples of PII include names, addresses, dates of birth, social security numbers, and biometric identifiers such as a person's fingerprints or picture. Other personal data may include, for example, customers' Internet browsing habits, purchase history, or even their preferences (e.g., likes and dislikes, as provided or obtained through social media).

Many organizations that obtain, use, and transfer personal data, including sensitive personal data, have begun to address these privacy and security issues. To manage personal data, many companies have attempted to implement operational policies and processes that comply with legal and industry requirements. However, there is an increasing need for improved systems and methods to manage personal data in a manner that complies with such policies.

Similarly, as individuals have become more aware of the risks associated with the theft or misuse of their personal data, they have sought additional tools to help them manage which entities process their personal data. There is currently a need for improved tools that would allow individuals to minimize the number of entities that process their personal data—especially entities that the individual doesn't actively do business with.

SUMMARY

A system, according to various embodiments, comprises a non-transitory computer-readable medium storing instructions; and processing hardware communicatively coupled to the non-transitory computer-readable medium. In various embodiments, the processing hardware is configured to execute the instructions and thereby perform operations comprising: (1) detecting a state of a browser application executed on a user device, the state of the browser application comprising an indication of a geographic location of the user device and a data subject request parameter; and (2) generating, a graphical user interface for the user device. In any embodiment described herein, the system may generate the graphical user interface based on the state of the browser application by: (1) identifying a local storage node based on the geographic location; (2) processing a data subject access request at the local storage node to identify personal data associated with a data subject based on the data subject request parameter; (3) configuring a first interactive element on the graphical user interface and excluding a second interactive element on the graphical user interface, wherein the first interactive element is configured to cause the user device to access the personal data and the second interactive element is configured to initiate a process for archiving the personal data; and (3) providing the graphical user interface for display on the user device. In particular embodiments, the processing hardware is further configured to perform operations comprising storing a copy of the personal data at the local storage node, and the first interactive element is further configured to cause the user device to access the personal data at the local storage node.

In any embodiment described herein, the processing hardware may be further configured for, responsive to determining that a particular time period has passed without selection of the first interactive element, modifying the first interactive element by configuring the first interactive element to navigate to a first display element that presents an indication of an expiration of an availability of the personal data. In still other embodiments, the processing hardware is further configured for receiving an indication of a selection of the first interactive element, and responsive to the selection of the first interactive element, causing deletion of the copy of the personal data form the local storage node. In particular embodiments, the processing hardware is further configured for, responsive to the selection of the first interactive element, modifying the first interactive element by configuring the first interactive element to navigate to a second display element that presents an indication of an unavailability of the personal data.

In various embodiments, identifying the local storage node based on the geographic location comprises determining which local storage node of a plurality of local storage nodes located in distant geographic locations comprise a location that shares the geographic location. In particular embodiments, the geographic location is defined by at least one of a particular jurisdiction and a particular country.

A system, according to various embodiments, comprises a non-transitory computer-readable medium storing instructions; and processing hardware communicatively coupled to the non-transitory computer-readable medium. In various embodiments, the processing hardware is configured to execute the instructions and thereby perform operations comprising: (1) detecting a state of a browser application executed on a user device, the state of the browser application comprising an indication of a geographic location of the user device and a data subject request parameter; (2) identifying a local storage node based on the geographic location; (3) processing a data subject access request at the local storage node to identify personal data associated with a data subject based on the data subject request parameter; (4) generating, based on the state of the browser application, a graphical user interface for the user device by configuring a first interactive element on the graphical user interface and excluding a second interactive element and a third interactive element on the graphical user interface. In any embodiment described herein; (1) the first interactive element is configured, upon selection, to navigate to a display element that presents the personal data; (2) the second interactive element is configured, upon selection, to initiate a process for deleting the personal data; and (3) the third interactive element is configured, upon selection, to enable a user to modify the personal data via the graphical user interface. In various embodiments, the system is further configured for providing the graphical user interface for display on the user device.

In particular embodiments, the processing hardware is further configured to perform operations comprising storing a copy of the personal data at the local storage node. In still other embodiments, the processing hardware is further configured for, responsive to determining that a particular time period has passed without selection of the first interactive element, modifying the display element to exclude the personal data and indicate that the personal data is no longer available for viewing. In various other embodiments, the processing hardware is further configured to perform operations comprising, responsive to selection of the first interactive element, configuring a second graphical user interface to include the second interactive element and providing the second graphical user interface to the user device. In some embodiments, the processing hardware is further configured to perform operations comprising receiving the data subject access request at a data subject access request management server, and routing the data subject access request from the data subject access request management server to the local storage node for processing. In various embodiments, routing the data subject access request from the data subject access request management server to the local storage node for processing comprises routing the data subject access request from the data subject access request management server to the local storage node such that the data subject access request does not pass through any server that is located in any location other than the geographic location.

In any embodiment described herein, the state of the browser application further comprises a network address associated with the user device and determining the geographic location of the user device is based on the network address. In various other embodiments, the processing hardware is further configured to perform operations comprising, responsive to selection of the first interactive element, configuring a third graphical user interface to include the third interactive element and providing the third graphical user interface to the user device, and responsive to selection of the third interactive element, enabling the user to modify the personal data via the graphical user interface. In still other embodiments, responsive to selection of the first interactive element, configuring a fourth graphical user interface comprising the display element and providing the fourth graphical user interface to the user device. In additional embodiments, the processing hardware is further configured to perform operations comprising, responsive to a selection of the first interactive element, incrementing a personal data access counter value, and responsive to determining that the personal data access counter value exceeds a threshold access value, modifying the display element to exclude the personal data and indicate that the personal data is no longer available for viewing.

