BACKGROUND

Over the past years, privacy and security policies, and related operations have become increasingly important. Breaches in security, leading to the unauthorized access of personal data (which may include sensitive personal data) have become more frequent among companies and other organizations of all sizes. Such personal data may include, but is not limited to, personally identifiable information (PII), which may be information that directly (or indirectly) identifies an individual or entity. Examples of PII include names, addresses, dates of birth, social security numbers, and biometric identifiers such as a person's fingerprints or picture. Other personal data may include, for example, customers' Internet browsing habits, purchase history, or even their preferences (e.g., likes and dislikes, as provided or obtained through social media).

Many organizations that obtain, use, and transfer personal data, including sensitive personal data, have begun to address these privacy and security issues. To manage personal data, many companies have attempted to implement operational policies and processes that comply with legal and industry requirements. However, there is an increasing need for improved systems and methods to manage personal data in a manner that complies with such policies.

SUMMARY

A computer-implemented data processing method for managing a consent receipt under a transaction, according to particular embodiments, comprises: (1) providing a user interface for initiating a transaction between an entity and a data subject; (2) receiving a request to initiate a transaction between the entity and the data subject; (3) in response to the request, generating, by a third party consent receipt management system, a unique consent receipt key; (4) receiving, from the data subject, a unique subject identifier; (5) electronically storing the unique subject identifier, the unique consent receipt key, and a unique transaction identifier associated with the transaction in computer memory; (6) electronically associating the unique subject identifier, the unique consent receipt key, and the unique transaction identifier; and (7) in response to receiving the request, transmitting a consent receipt to the data subject, the consent receipt comprising at least the unique subject identifier and the unique consent receipt key.

A computer-implemented data processing method for managing a consent receipt under a transaction, according to various embodiments, comprises: (1) providing a user interface for initiating a transaction between an entity and a data subject; (2) receiving, from a computing device associated with the data subject via the user interface, a request to initiate a transaction between the entity and the data subject; (3) in response to receiving the request: (A) generating, by a consent receipt management system, a unique consent receipt key; and (B) initiating a virtual browsing session on a consent receipt capture server; (4) accessing a webpage hosting the user interface using a virtual browser during the virtual browsing session; (5) scanning the webpage to identify the user interface; (6) capturing the user interface in an unfilled state; (7) electronically storing a unique subject identifier associated with the data subject, the unique consent receipt key, a unique transaction identifier associated with the transaction, and the capture of the user interface in computer memory; (8) electronically associating the unique subject identifier, the unique consent receipt key, the unique transaction identifier, and the capture of the user interface; and (9) in response to receiving the request, optionally transmitting a consent receipt to the data subject, the consent receipt comprising at least the unique subject identifier and the unique consent receipt key.

A consent receipt management system, according to any embodiment described herein, may comprise: (1) one or more processors; and (2) computer memory. In any embodiment described herein, the consent receipt management system may be configured for: (1) receiving a request to initiate a transaction between an entity and a data subject, the transaction involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction; (2) in response to receiving the request: (A) identifying a transaction identifier associated with the transaction; (B) generating, a unique consent receipt key for the transaction; and (C) determining a unique subject identifier for the data subject; (3) electronically storing the unique subject identifier, the unique consent receipt key, and the transaction identifier in computer memory; (4) electronically associating the unique subject identifier, the unique consent receipt key, and the transaction identifier; (5) generating a consent record for the transaction, the consent receipt comprising at least the unique subject identifier and the unique consent receipt key; and (6) electronically transmitting the consent record to the data subject.

A computer-implemented data processing method for managing a consent receipt under a transaction, in any embodiment described herein, may comprise: (1) providing a user interface for initiating a transaction between an entity and a data subject; (2) receiving a request to initiate a transaction between the entity and the data subject; (3) in response to the request, generating, by a third party consent receipt management system, a unique consent receipt key; (4) receiving, from the data subject, a unique subject identifier; (5) electronically storing the unique subject identifier, the unique consent receipt key, and a unique transaction identifier associated with the transaction in computer memory; (6) electronically associating the unique subject identifier, the unique consent receipt key, and the unique transaction identifier; and (7) in response to receiving the request, transmitting a consent receipt to the data subject, the consent receipt comprising at least the unique subject identifier and the unique consent receipt key.

A computer-implemented data processing method for identifying one or more pieces of personal data associated with a data subject within a data system in order to fulfill a data subject access request, in any embodiment described herein, comprises: (1) receiving, by one or more processors, from a data subject, a data subject access request; (2) processing the data subject access request by identifying the one or more pieces of personal data associated with the data subject; and (3) in response to identifying the one or more pieces of personal data, taking one or more actions such as, for example: (1) deleting the one or more pieces of personal data from the data system; (2) modifying at least one of the one or more pieces of personal data and storing the modified at least one of the one or more pieces of personal data in the data system; and (3) generating a report comprising the one or more pieces of personal data and providing the report to the data subject. In various embodiments, identifying the one or more pieces of personal data associated with the data subject comprises scanning one or more data inventories stored within the data system for the one or more pieces of personal data;

A data processing data inventory generation system, according to various embodiments, comprises: (1) one or more processors; (2) computer memory; and (3) a computer-readable medium storing computer-executable instructions. In various embodiments, the computer-executable instructions, when executed by the one or more processors, cause the one or more processors to perform operations comprising: (1) identifying a primary data asset that collects or stores personal data of one or more data subjects; and (2) generating a data inventory for the primary data asset, the data inventory storing one or more primary data asset inventory attributes. In particular embodiments, the one or more primary data asset inventory attributes comprise: (1) a type of personal data collected or stored by the primary data asset; and (2) primary transfer data associated with the personal data and the primary data asset. In particular embodiments, the computer-executable instructions, when executed by the one or more processors, further cause the one or more processors to perform operations comprising: (1) identifying a transfer data asset based at least in part on the primary transfer data; (2) modifying the data inventory to include the transfer data asset, the transfer data asset storing one or more transfer data asset inventory attributes comprising the primary transfer data; (3) digitally storing the data inventory in the computer memory; and (4) electronically linking the primary data asset to the transfer data asset in the data inventory.

A computer-implemented data processing method of generating a data inventory for a plurality of inter-related data assets utilized in the processing of one or more pieces of personal data, according to various embodiments, comprises: (1) identifying, by one or more processors, from the plurality of inter-related data assets, a storage asset, the storage asset storing the one or more pieces of personal data collected from one or more data subjects; (2) identifying, by one or more processors, from the plurality of inter-related data assets, a collection asset that transfers the one or more pieces of personal data to the storage asset; (3) identifying, by one or more processors, from the plurality of inter-related data assets, a transfer asset to which the storage asset transfers the one or more pieces personal data; (4) digitally storing, by one or more processors, in computer memory, one or more storage asset inventory attributes comprising a type of personal data stored by the storage asset; (5) digitally storing, by one or more processors, in computer memory, one or more collection asset inventory attributes comprising the one or more pieces of personal data that the collection asset transfers to the storage asset; (6) digitally storing, by one or more processors, in computer memory, one or more transfer asset inventory attributes comprising the one or more pieces of personal data that the storage asset transfers to the transfer asset; and (7) generating the data inventory.

In particular embodiments, generating the data inventory comprises: (1) associating the storage asset with the one or more storage asset inventory attributes in computer memory; (2) associating the collection asset with the one or more collection asset inventory attributes in computer memory; (3) associating the transfer asset with the one or more transfer asset inventory attributes in computer memory; (4) electronically linking the collection asset to the storage asset in computer memory; (5) electronically linking the storage asset to the transfer asset; and (6) electronically mapping the one or more pieces of personal data to the collection asset, the storage asset, and the transfer asset.

A computer-implemented data processing method for generating a data model of personal data processing activities, according to particular embodiments, comprises: (1) generating a data model for one or more data assets used in the collection or storage of personal data; (2) digitally storing the data model in computer memory; (3) identifying a first data asset of the one or more data assets; (4) modifying the data model to include the first data asset; (5) generating a data inventory for the first data asset in the data model; (6) associating the data inventory with the first data asset in computer memory; and (7) mapping the first data asset to at least one of the one or more data assets in the data model. In various embodiments, the data inventory comprises one or more inventory attributes such as, for example: (1) one or more processing activities associated with the first data asset; (2) transfer data associated with the first data asset; and (3) one or more pieces of personal data associated with the first asset.

A computer-implemented data processing method for optimizing provision of consent to the use of one or more cookies at a particular web domain by one or more users accessing the particular web domain, according to various embodiments, comprise: (1) receiving, by one or more processors, a request to initiate a cookie consent interface consent conversion test for the particular web domain, the request comprising: (a) the domain name; (b) a first selection of a first consent interface template variant; (c) a second selection of a second consent interface template variant; and (d) at least one success criteria; (2) in response to receiving the request, initiating, by one or more processors, the cookie consent interface consent conversion test for the particular web domain by: (a) presenting, to a first portion of the one or more users accessing the particular web domain, the first consent interface template variant; (b) presenting, to a second portion of the one or more users accessing the particular web domain, the second consent interface template variant; (3) receiving, by one or more processors, for each respective user of the first portion of the one or more users accessing the particular web domain, first consent data via the first consent interface template variant; (4) receiving, by one or more processors, for each respective user of the second portion of the one or more users accessing the particular web domain, second consent data via the second consent interface template variant; (5) analyzing, by one or more processors, the first consent data and the second consent data to determine a more successful consent interface template of the first consent interface template variant and the second consent interface template variant based at least in part on the at least one success criteria; and (6) in response to determining the more successful consent interface template of the first consent interface template variant and the second consent interface template: (a) completing the cookie consent interface consent conversion test; and (b) presenting, by one or more processors, the more successful consent interface template to any subsequent user that accesses the particular web domain after completing the cookie consent interface consent conversion test for at least a particular length of time.

A computer system, in particular embodiments, comprises at least one processor and memory. In various embodiments, the computer system is configured for: (1) receiving, from a plurality of users via a respective computing device, a plurality of requests to access a particular domain; (2) in response to receiving the plurality of requests, causing, for each of the plurality of requests, each respective computing device to display, on at least one webpage associated with the particular domain, a particular cookie consent interface from a group of at least two test interfaces, wherein the at least two test interfaces comprise: (a) a first cookie consent test interface having at least one first test attribute; and (b) a second cookie consent test interface having at least one second test attribute; (3) receiving, via the particular cookie consent interface, consent data for each of the plurality of requests, the consent data indicating a level of consent provided by each of the plurality of users for the use of one or more cookies by the particular domain; (4) analyzing the consent data to identify which of the first cookie consent test interface and the second cookie consent interface most closely matches one or more consent criteria; (5) determining that the particular cookie consent test interface most closely matches the one or more consent criteria; and (6) in response to determining the particular cookie consent test interface most closely matches the one or more consent criteria, at least temporarily implementing the particular cookie consent test interface as a primary cookie consent interface for use by the particular domain.

A computer-implemented data processing method for automatically selecting a user interface for the collection of consent to process data, according to various embodiments, comprises: (a) receiving, from a first user via a first computing device, a request to access a website; (b) in response to receiving the request, determining whether the first user has previously consented to the use of one or more cookies by the website; (c) in response to determining that the user has not previously consented to the use of one or more cookies by the website, causing the first computing device to display a first cookie consent interface from a group of at least two test consent interfaces; (d) collecting consent data for the first user based on one or more selections made by the first user via the first cookie consent interface; (e) repeating steps a-d for a plurality of other users of the website, such that each of the at least two consent interfaces are displayed to at least a portion of the plurality of other users; (f) analyzing the consent data to identify a particular interface of the at least two consent interfaces that results in a more desired level of consent; and (g) in response to identifying the particular interface, implementing the particular interface as the primary consent interface for use by the website.

A computer-implemented data processing method for managing a consent receipt under a transaction, in particular embodiments, comprises: (1) providing a user interface for initiating a transaction between an entity and a data subject; (2) receiving, from a computing device associated with the data subject via the user interface, a request to initiate a transaction between the entity and the data subject; (3) in response to receiving the request: (a) generating, by a consent receipt management system, a unique consent receipt key; and (b) initiating a virtual browsing session on a consent receipt capture server; (4) accessing a webpage hosting the user interface using a virtual browser during the virtual browsing session; (5) scanning the webpage to identify the user interface; (6) capturing the user interface in an unfilled state; (7) electronically storing a unique subject identifier associated with the data subject, the unique consent receipt key, a unique transaction identifier associated with the transaction, and the capture of the user interface in computer memory; (8) electronically associating the unique subject identifier, the unique consent receipt key, the unique transaction identifier, and the capture of the user interface; and (9) in response to receiving the request, optionally transmitting a consent receipt to the data subject, the consent receipt comprising at least the unique subject identifier and the unique consent receipt key.

A computer-implemented data processing method for managing a consent receipt under a transaction, in various embodiments, comprises: (1) providing a user interface for initiating a transaction between an entity and a data subject; (2) receiving a request from a data subject to initiate a transaction between the entity and the data subject; (3) in response to the request: (a) prompting the data subject to provide consent to the entity for processing personal data associated with the data subject as part of the transaction; and (b) generating a unique consent receipt key; (4) receiving, from the data subject, a unique subject identifier; (5) electronically storing the unique subject identifier, the unique consent receipt key, a unique transaction identifier associated with the transaction, and an indication of the consent in a consent record in computer memory; and (6) electronically associating the unique subject identifier, the unique consent receipt key, the unique transaction identifier, and the indication of the consent.

A computer-implemented data processing method for managing and maintaining a consent receipt under a transaction, in any embodiment described herein, may comprise: (1) providing a user interface for initiating a transaction between an entity and a data subject; (2) receiving a request to initiate the transaction between the entity and the data subject via the user interface; (3) in response to the request, generating, a unique consent receipt key; (4) electronically storing a unique subject identifier, the unique consent receipt key, and a unique transaction identifier associated with the transaction in computer memory; (5) electronically associating the unique subject identifier, the unique consent receipt key, and the unique transaction identifier; (6) determining whether the consent receipt is subject to expiration; and (7) in response to determining that consent receipt is subject to expiration, automatically taking an action under the transaction to avoid the expiration.

A computer-implemented data processing method for automating processing of data of one or more data subjects, in particular embodiments, comprises: (1) providing, by one or more processors, to the one or more data subjects, a user interface for initiating a transaction between the entity and each respective data subject of the one or more data subjects; (2) receiving, by one or more processors, a plurality of requests to initiate a plurality of transactions, each of the plurality of transactions comprising a respective transaction between the entity and a respective data subject of the one or more data subjects; (3) in response to receiving each of the plurality of requests, generating, by one or more processors, a unique respective consent receipt key, the unique respective consent receipt key comprising an indication of consent by each of the one or more data subjects to the processing of the one or more pieces of personal data; (4) electronically storing and associating, by one or more processors, each unique respective consent receipt key, a unique identifier for the respective data subject, and a unique transaction identifier associated with the respective transaction of the plurality of transactions in computer memory; (5) receiving an indication that a data system associated with the entity has processed a new piece of personal data associated with a particular data subject of the one or more data subjects as part of a particular transaction of the plurality of transactions; (6) in response to receiving the indication that the data system has processed the new piece of personal data, determining, based on the plurality of consent receipts, whether the particular data subject has provided the indication of consent for the processing of the new piece of personal data as part of the particular transaction; (7) in response to determining that the particular data subject has provided the indication of the consent, automatically processing the new piece of personal data; and (8) in response to determining that the particular data subject has not provided the indication of the consent, automatically taking an action selected from the group consisting of: (a) automatically ceasing processing of the new piece of personal data; (b) identifying a legal basis for processing the new piece of personal data absent the indication of the consent, and, in response to identifying the legal basis, automatically processing the new piece of personal data; and (c) prompting the particular data subject to provide the indication of the consent.

A computer-implemented data processing method for blocking one or more processes based on consent data, in any embodiment described herein, may comprise: (1) receiving an indication that one or more entity systems are processing one or more pieces of personal data associated with a particular data subject; (2) in response to receiving the indication, identifying at least one process for which the one or more pieces of personal data are being processed; (3) determining, using a consent receipt management system, whether the data subject has provided valid consent for the processing of the one or more pieces of personal data for the at least one process; and (4) at least partially in response to determining that the data subject has not provided valid consent for the processing of the one or more pieces of personal data for the at least one process, automatically blocking the processing.

A consent receipt management and automated process blocking system, according to particular embodiments, comprises one or more processors, and computer memory that stores one or more consent records associated with a unique subject identifier, each of the one or more consent records being associated with a respective transaction of a plurality of transactions involving a data subject and an entity. In various embodiments, the consent receipt management and automated process blocking system is configured for: (1) receiving an indication that one or more computer systems are attempting to process one or more pieces of personal data associated with a data subject; (2) determining a purpose of processing the one or more pieces of personal data; (3) accessing the one or more consent records; (4) determining, based at least in part on the purpose of the processing and the one or more consent records, whether the data subject has provided valid consent to the processing of the one or more pieces of personal data for the purpose; (5) in response to determining that the data subject has provided the valid consent, automatically processing the one or more pieces of personal data for the purpose; and (5) in response to determining that the data subject has not provided the valid consent, at least temporarily blocking the processing of the one or more pieces of personal data.

A computer-implemented data processing method for monitoring consent record rate change of a particular capture point, in various embodiments, comprises: (1) providing a user interface at a particular capture point for initiating a transaction between an entity and a data subject; (2) receiving, from a respective computing device associated with each of a plurality of data subjects via the user interface, a plurality of requests to initiate a respective transaction between the entity and each of the plurality of data subjects; (3) in response to receiving each of the plurality of requests: (a) generating, by a consent receipt management system, a unique consent receipt key for each respective request of the plurality of requests; (b) storing, for each respective request, a respective consent record comprising the unique consent receipt key; (4) monitoring the particular capture point to determine a rate of consent records generated at the particular capture point; (5) identifying a change in the rate of consent records generated at the particular capture point; and (6) in response to identifying the change in the rate of consent records generated at the particular capture point, generating an electronic alert and transmitting the electronic alert to an individual responsible for the particular capture point.

A consent receipt management system, according to various embodiments, comprises one or more processors and computer memory that stores a plurality of consent records associated with a unique subject identifier, each of the plurality of consent records being associated with a respective transaction of a plurality of transactions involving a data subject and an entity. In particular embodiments, the consent receipt management system is configured for: (1) receiving, at a particular consent capture point, a request to initiate a transaction between the entity and the data subject, the transaction involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction; (2) in response to receiving the request: (a) identifying a transaction identifier associated with the transaction; (b) identifying a capture point identifier for the particular consent capture point; (c) generating, a unique consent receipt key for the transaction; and (d) determining a unique subject identifier for the data subject; (3) electronically storing the unique subject identifier, the unique consent receipt key, the capture point identifier, and the transaction identifier in computer memory; (4) electronically associating the unique subject identifier, the unique consent receipt key, the capture point identifier, and the transaction identifier; (5) generating a consent record for the transaction, the consent record comprising at least the unique subject identifier and the unique consent receipt key; (6) monitoring the particular consent capture point to determine a consent record rate for the particular consent capture point; (7) analyzing the consent record rate to identify a particular change in the consent record rate; and (8) in response to identifying the particular change in the consent record rate, taking one or more automated actions.

A computer-implemented data processing method for managing a consent capture point, in various embodiments, comprises: (1) providing, at the consent capture point, a user interface for initiating a transaction between an entity and a data subject; (2) receiving a request to initiate the transaction between the entity and the data subject; (3) in response to receiving the request, generating, by a third-party consent receipt management system, a unique consent receipt key; (4) receiving, from the data subject, a unique subject identifier; (5) identifying a capture point identifier associated with the capture point; (6) electronically storing the unique subject identifier, the unique consent receipt key, the capture point identifier, and a unique transaction identifier associated with the transaction in a consent record; (7) electronically associating the unique subject identifier, the unique consent receipt key, the consent capture point identifier, and the unique transaction identifier; (8) accessing a plurality of consent records associated with the capture point identifier; (9) analyzing each of the plurality of consent records associated with the consent capture point identifier to determine a consent record rate for the consent capture point; (10) monitoring the consent record rate for the consent capture point to identify a particular change to the consent record rate; and (11) in response to identifying the particular change in the consent record rate, taking one or more automated actions.

A computer-implemented data processing method for managing a consent receipt under a transaction, in various embodiments, comprises: (1) receiving a request to initiate a transaction between an entity and a data subject; (2) determining that the transaction includes one or more types of personal data of the data subject involved in the transaction; (3) determining that the data subject is required to consent to the one or more types of personal data involved in the transaction; (4) determining, based at least in part on the one or more types of personal data involved in the transaction, an age required for the data subject to provide valid consent; (5) prompting the data subject to provide a response to each of one or more questions; (6) receiving the response to each of the one or more questions from the data subject; (7) calculating a predicted age of the data subject based at least in part on the response to each of the one or more questions; (8) comparing the predicted age of the data subject to the age required for the data subject to provide valid consent; (9) in response to determining that the predicted age of the data subject is at least equal to the age required for the data subject to provide valid consent, generating a unique consent receipt key for the data subject; and (10) in response to determining that the predicted age of the data subject is less than the age required for the data subject to provide valid consent, terminating the transaction.

A computer-implemented data processing method for managing a consent receipt under a transaction in particular embodiments, comprises: (1) receiving a data subject access request from a requestor that is a request for a particular organization to perform one or more actions with regard to one or more pieces of personal data associated with an identified data subject that the particular organization has obtained on the identified data subject, wherein the data subject access request comprises one or more request parameters; (2) in response to receiving the data subject access request from the requestor, validating an identity of the requestor by prompting the requestor to identify information associated with the identified data subject, wherein validating the identity of the requestor comprises: (a) accessing, via one or more computer networks, one or more third-party data aggregation systems; (b) confirming, based at least in part on information received via the one or more third-party data aggregation systems, that the identified data subject exists; and (c) in response to determining that the identified data subject exists, confirming, based at least in part on the information received via the one or more third-party data aggregation systems and the one or more request parameters, that the requestor is the identified data subject; (3) in response to validating the identity of the requestor, processing the request by identifying one or more pieces of personal data associated with the identified data subject, the one or more pieces of personal data being stored in one or more data repositories associated with the particular organization; and (4) taking the one or more actions based at least in part on the data subject access request, the one or more actions including one or more actions related to the one or more pieces of personal data associated with the identified data subject.

A computer-implemented data processing method for managing a consent receipt under a transaction, according to particular embodiments, comprises: (1) receiving a request to initiate a transaction between an entity and a data subject; (2) determining that the transaction includes one or more types of personal data of the data subject involved in the transaction; (3) determining that the data subject is required to consent to the one or more types of personal data involved in the transaction; (4) determining, based at least in part on the one or more types of personal data involved in the transaction, an age required for the data subject to provide valid consent; (5) determining that an age of the data subject is less than the age required for the data subject to provide valid consent; (6) in response to determining that the age of the data subject is less than the age required for the data subject to provide valid consent, communicating with an identified guardian of the data subject to receiving valid consent to fulfill the transaction.

Various other embodiments of the system are described in the listing of concepts below:

A computer-implemented data processing method for managing a consent receipt under a transaction, according to various embodiments comprises:

providing, by one or more computer processors, at the consent capture point, a user interface for initiating a transaction between an entity and a data subject, the transaction involving processing personal data of the data subject by the entity;

receiving, by one or more computer processors, a request to initiate the transaction between the entity and the data subject;

in response to receiving the request, generating, by one or more computer processors, by a consent receipt management system, a unique consent receipt key;

receiving, by one or more computer processors, from the data subject, a unique subject identifier;

requesting, by one or more computer processors, from the data subject, at least one piece of identifying information;

receiving, by one or more computer processors, the at least one piece of identifying information from the data subject;

determining, by one or more computer processors, based at least in part on the at least one piece of identifying information, an age of the data subject;

identifying, by one or more computer processors, a capture point identifier associated with the capture point;

electronically storing, by one or more computer processors, the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and a unique transaction identifier associated with the transaction in a consent record;

electronically associating, by one or more computer processors, the unique subject identifier, the unique consent receipt key, the consent capture point identifier, the age of the data subject, and the unique transaction identifier in computer memory;

determining, by one or more computer processors, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of personal data under the transaction;

in response to determining the data subject meets the one or more age criteria for the processing of personal data under the transaction, modifying, by one or more computer processors, the consent record to electronically store an indication that the data subject has provided valid consent for the transaction;

in response to determining the data subject does not meet the one or more age criteria for the processing of personal data under the transaction, modifying, by one or more computer processors, the consent record to include an indication that the data subject has provided invalid consent.

2. The computer-implemented data processing method of Concept 1, in any embodiment described herein, may comprise:

receiving a request from a data system associated with the entity to process a new piece of personal data associated with the data subject as part of the transaction;

in response to receiving the request to process the new piece of personal data, determining whether the consent record comprises the indication of valid consent or the indication of invalid consent;

in response to determining that the consent record comprises the indication of valid consent, automatically processing the new piece of personal data; and

in response to determining that the consent record comprises the indication of invalid consent, automatically ceasing processing of the new piece of personal data

3. The computer-implemented data processing method of Concept 2, wherein determining, based at least in part on the at least one piece of identifying information, the age of the data subject may comprise:

accessing, via one or more computer networks, one or more third-party data aggregation systems; and

determining, based at least in part on the at least one piece of identifying information using the one or more third-party data aggregation systems, the age of the data subject.

4. The computer-implemented data processing method of Concept 2, wherein:

the at least one piece of identifying information comprises the age of the data subject; and

the method, in any embodiment described herein, may comprise:prompting the data subject to provide a response to each of one or more questions;receiving the response to each of the one or more questions from the data subject;confirming the age of the data subject based at least in part on the response to each of the one or more questions.
5. The computer-implemented data processing method of Concept 4, wherein the one or more questions are related to a logic problem that include, for example: (i) mathematics, (ii) reading comprehension.
6. The computer-implemented data processing method of Concept 2, wherein determining the age of the data subject may comprise:

accessing, via one or more computer networks, the one or more third-party data aggregation systems; and

determining, based at least in part on the at least one piece of identifying information using the one or more third-party data aggregation systems, identifying information about the data subject;

generating, based at least in part on the identifying information about the data subject, at least one threshold identity confirmation question;

prompting the data subject to provide a response to the at least one threshold identity confirmation question; and

comparing the response to the identifying information about the data subject to determine the age of the data subject.

7. The computer-implemented data processing method of Concept 6, wherein the identifying information about the data subject may comprise a year of birth of the data subject.

8. The computer-implemented data processing method of Concept 1, in any embodiment described herein, may comprise:

in response to determining the data subject does not meet the one or more age criteria for the processing of personal data under the transaction:prompting the data subject to provide one or more contact details for a guardian of the data subject;accessing an electronic guardian registry for one or more data subjects;determining, based at least in part on the one or more contact details for the guardian of the data subject using the electronic guardian registry, that the data subject has an identified registered guardian; andcommunicating with the identified guardian, via the one or more contact details, to receive the valid consent to fulfill the transaction on behalf of the data subject by:transmitting an electronic message to the identified guardian; andprompting the identified guardian to provide the valid consent via the electronic message.
9. The computer-implemented data processing method of Concept 8, in any embodiment described herein, may comprise:receiving the valid consent from the identified guardian; andin response to receiving the valid consent from the identified guardian, modifying the consent record to electronically store an indication that the identified guardian has provided valid consent for the transaction

10. A computer-implemented data processing method for managing a consent receipt under a transaction, in particular embodiments, comprises:

receiving, by one or more computer processors, a request to initiate a transaction between an entity and a data subject;

determining, by one or more computer processors, that the transaction includes one or more types of personal data of the data subject involved in the transaction;

determining, by one or more computer processors, that the data subject is required to consent to the one or more types of personal data involved in the transaction;

determining, based at least in part on the one or more types of personal data involved in the transaction, an age required for the data subject to provide valid consent;

prompting, by one or more computer processors, the data subject to provide a response to each of one or more questions;

receiving the response, by one or more computer processors, to each of the one or more questions from the data subject;

calculating, by one or more computer processors, a predicted age of the data subject based at least in part on the response to each of the one or more questions;

comparing, by one or more computer processors, the predicted age of the data subject to the age required for the data subject to provide valid consent;

in response to determining that the predicted age of the data subject is at least equal to the age required for the data subject to provide valid consent, generating, by one or more computer processors, a unique consent receipt key for the data subject; and

in response to determining that the predicted age of the data subject is less than the age required for the data subject to provide valid consent, terminating, by one or more computer processors, the transaction.

11. The computer-implemented data processing method of Concept 10, wherein the one or more questions are related to a logic problem that include at least one subject such as: (i) mathematics, (ii) reading comprehension.

12. The computer-implemented data processing method of Concept 10, in any embodiment described herein, may comprise:

accessing, via one or more computer networks, one or more third-party data aggregation systems; and

confirming, based at least in part on information received via the one or more third-party data aggregation systems, the predicted age of the data subject.

13. The computer-implemented data processing method of Concept 12, wherein confirming the predicted age of the data subject may comprise:

generating, based at least in part on the information received via the one or more third-party data aggregation systems, at least one threshold identity confirmation question;

prompting the data subject to provide a response to the at least one threshold identity confirmation question; and

comparing the response to the information received via the one or more third-party data aggregation systems to validate the identity of the requestor.

14. The computer-implemented data processing method of Concept 13, wherein the information received via the one or more third-party data aggregation systems may comprise a year of birth of the data subject.

15. The computer-implemented data processing method of Concept 12, in any embodiment described herein, may comprise:

prompting the data subject to provide one or more additional pieces of information in order to determine an actual age of the data subject;

receiving the one or more additional pieces of information; and

comparing the one or more additional pieces of information received from the data subject to corresponding information accessed via the one or more third-party data aggregation systems in order to validate the identity of the requestor.

16. The computer-implemented data processing method of Concept 15, wherein the one or more additional pieces of information may comprise one or more images provided by the data subject via a computing device associated with the data subject.

17. A consent receipt management system, in various embodiments, comprises:

one or more processors; and

computer memory that stores a plurality of consent records associated with a unique subject identifier, each of the plurality of consent records being associated with a respective transaction of a plurality of transactions involving a data subject and an entity, wherein the consent receipt management system, in various embodiments, is configured for:receiving, at a particular consent capture point, a request to initiate a transaction between the entity and the data subject, the transaction involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction;in response to receiving the request:identifying a transaction identifier associated with the transaction;identifying a capture point identifier for the particular consent capture point;generating, a unique consent receipt key for the transaction; anddetermining a unique subject identifier for the data subject;requesting, from the data subject, at least one piece of identifying information;receiving the at least one piece of identifying information from the data subject;determining, based at least in part on the at least one piece of identifying information, an age of the data subject;electronically storing the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and the transaction identifier in computer memory;electronically associating the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and the transaction identifier;generating a consent record for the transaction, the consent record comprising at least the unique subject identifier, the age of the data subject, and the unique consent receipt key;

receiving an indication that a data system associated with the entity has processed a new piece of personal data associated with the data subject as part of the transaction;

in response to receiving the indication that the data system associated with the entity has processed the new piece of personal data, determining, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of data under the transaction;

in response to determining that the data subject meets the one or more age criteria, automatically processing the new piece of personal data; and

in response to determining that the data subject does not meet the one or more age criteria, automatically taking an action selected from the group consisting of:automatically ceasing processing of the new piece of personal data; andprompting the data subject to provide one or more contact details for a guardian of the data subject.
18. The consent receipt management system of Concept 17, wherein determining, based at least in part on the at least one piece of identifying information, the age of the data subject may comprise:

accessing, via one or more computer networks, one or more third-party data aggregation systems; and

determining, based at least in part on the at least one piece of identifying information using the one or more third-party data aggregation systems, the age of the data subject.

19. The consent receipt management system of Concept 17, wherein:

the at least one piece of identifying information comprises the age of the data subject; and

the consent receipt management system is configured for:prompting the data subject to provide a response to each of one or more questions;receiving the response to each of the one or more questions from the data subject;confirming the age of the data subject based at least in part on the response to each of the one or more questions.
20. The consent receipt management system of Concept 17, wherein the consent receipt management system may be configured for:

accessing an electronic guardian registry for one or more data subjects;

determining, based at least in part on the one or more contact details for the guardian of the data subject using the electronic guardian registry, that the data subject has an identified registered guardian; and

communicating with the identified guardian, via the one or more contact details, to receive valid consent to fulfill the transaction on behalf of the data subject by:transmitting an electronic message to the identified guardian; andprompting the identified guardian to provide the valid consent via the electronic message.

Various other embodiments of the system, such as any embodiment described herein, may further include one or more features described in the listing of concepts below:

1. A computer-implemented data processing method for managing a consent receipt under a transaction, in particular embodiments, comprises:

providing, by one or more computer processors, at the consent capture point, a user interface for initiating a transaction between an entity and a data subject, the transaction involving processing personal data of the data subject by the entity;

receiving, by one or more computer processors, a request to initiate the transaction between the entity and the data subject;

in response to receiving the request, generating, by one or more computer processors, by a consent receipt management system, a unique consent receipt key;

receiving, by one or more computer processors, from the data subject, a unique subject identifier;

requesting, by one or more computer processors, from the data subject, at least one piece of identifying information;

receiving, by one or more computer processors, the at least one piece of identifying information from the data subject;

determining, by one or more computer processors, based at least in part on the at least one piece of identifying information, an age of the data subject;

identifying, by one or more computer processors, a capture point identifier associated with the capture point;

electronically storing, by one or more computer processors, the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and a unique transaction identifier associated with the transaction in a consent record;

electronically associating, by one or more computer processors, the unique subject identifier, the unique consent receipt key, the consent capture point identifier, the age of the data subject, and the unique transaction identifier in computer memory;

determining, by one or more computer processors, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of personal data under the transaction;

in response to determining the data subject meets the one or more age criteria for the processing of personal data under the transaction, modifying, by one or more computer processors, the consent record to electronically store an indication that the data subject has provided valid consent for the transaction;

in response to determining the data subject does not meet the one or more age criteria for the processing of personal data under the transaction:prompting the data subject to provide one or more contact details for a guardian of the data subject;accessing an electronic guardian registry for one or more data subjects;determining, based at least in part on the one or more contact details for the guardian of the data subject using the electronic guardian registry, that the data subject has an identified registered guardian; andcommunicating with the identified guardian, via the one or more contact details, to receive the valid consent to fulfill the transaction on behalf of the data subject by:transmitting an electronic message to the identified guardian; andprompting the identified guardian to provide the valid consent via the electronic message.
2. The computer-implemented data processing method of Concept 1, in any embodiment described herein, may comprise:

receiving a request from a data system associated with the entity to process a new piece of personal data associated with the data subject as part of the transaction;

in response to receiving the request to process the new piece of personal data, determining whether the consent record comprises the indication of valid consent;

in response to determining that the consent record comprises the indication of valid consent, automatically processing the new piece of personal data; and

in response to determining that the consent record does not comprise the indication of valid consent, automatically ceasing processing of the new piece of personal data

3. The computer-implemented data processing method of Concept 2, in any embodiment described herein, may comprise:

receiving the valid consent from the identified guardian; and

in response to receiving the valid consent from the identified guardian, modifying the consent record to electronically store an indication that the identified guardian has provided the valid consent for the transaction.

4. The computer-implemented data processing method of Concept 2, wherein:

the electronic message comprises a unique code; and

the computer-implemented data processing method, in any embodiment described herein, may comprise:prompting the data subject to provide the unique code;receiving the unique code from the data subject; andin response to receiving the unique code from the data subject, modifying the consent record to electronically store an indication that the identified guardian has provided the valid consent for the transaction.
5. The computer-implemented data processing method of Concept 4, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:generating the unique code;determining an expiration time for the unique code;in response to receiving the unique code from the data subject, determining whether the expiration time has elapsed;in response to determining that the expiration time has elapsed:terminating the unique code;generating and displaying a message to the data subject indicating that the unique code has expired; andmodifying the consent record to electronically store an indication that the identified guardian has not provided the valid consent for the transaction.
6. The computer-implemented data processing method of Concept 2, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:

receiving the valid consent from the identified guardian, the valid consent comprising:consent to fulfill the transaction on behalf of the data subject; andconsent to fulfill one or more additional transactions on behalf of the data subject;

in response to receiving the valid consent from the identified guardian:modifying the consent record to electronically store an indication that the identified guardian has provided the valid consent for the transaction; andstoring an electronic indication associated with the unique subject identifier of the consent to fulfill one or more additional transactions on behalf of the data subject.
7. The computer-implemented data processing method of Concept 6, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:

receiving a second request to initiate a second transaction between the entity and the data subject;

in response to receiving the second request, generating, by a consent receipt management system, a second unique consent receipt key;

electronically storing the unique subject identifier, the second unique consent receipt key, a unique second transaction identifier, and the consent to fulfill one or more additional transactions on behalf of the data subject associated with the second transaction in a second consent record; and

electronically associating the unique subject identifier, the second unique consent receipt key, and the unique second transaction identifier in computer memory.

8. The computer-implemented data processing method of Concept 7, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:

receiving a request from the data system associated with the entity to process a second new piece of personal data associated with the data subject as part of the second transaction;

in response to receiving the request to process the second new piece of personal data, determining whether the consent record comprises a second indication of valid consent based at least in part on the consent to fulfill one or more additional transactions on behalf of the data subject;

in response to determining that the consent record comprises the second indication of valid consent, automatically processing the second new piece of personal data.

9. The computer-implemented data processing method of Concept 6, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:

receiving a third request to initiate a third transaction between the entity and the data subject, the third request comprising the unique subject identifier;

in response to receiving the third request, generating, by a consent receipt management system, a third unique consent receipt key;

electronically storing the unique subject identifier, the third unique consent receipt key, and a unique third transaction identifier, in a third consent record;

electronically associating the unique subject identifier, the third unique consent receipt key, and the unique third transaction identifier in computer memory; and

determining, based at least in part on the unique subject identifier, whether a guardian associated with the data subject has previously provided the consent to fulfill one or more additional transactions on behalf of the data subject; and

in response to determining that the guardian associated with the data subject has previously provided the consent to fulfill one or more additional transactions on behalf of the data subject, modifying the third consent record to electronically store an indication of a third valid consent.

10. A computer-implemented data processing method for managing a consent receipt under a transaction, according to various embodiments, comprises:

providing, by one or more computer processors, at the consent capture point, a user interface for initiating a transaction between an entity and a data subject, the transaction involving processing personal data of the data subject by the entity;

receiving, by one or more computer processors, a request to initiate the transaction between the entity and the data subject;

in response to receiving the request, generating, by one or more computer processors, by a consent receipt management system, a unique consent receipt key;

receiving, by one or more computer processors, from the data subject, a unique subject identifier;

requesting, by one or more computer processors, from the data subject, at least one piece of identifying information;

receiving, by one or more computer processors, the at least one piece of identifying information from the data subject;

determining, by one or more computer processors, based at least in part on the at least one piece of identifying information, an age of the data subject;

identifying, by one or more computer processors, a capture point identifier associated with the capture point;

electronically storing, by one or more computer processors, the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and a unique transaction identifier associated with the transaction in a consent record;

electronically associating the unique subject identifier, the unique consent receipt key, the consent capture point identifier, the age of the data subject, and the unique transaction identifier in computer memory;

determining, by one or more computer processors, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of personal data under the transaction;

in response to determining the data subject meets the one or more age criteria for the processing of personal data under the transaction, modifying, by one or more computer processors, the consent record to electronically store an indication of valid consent comprising an indication that the data subject has provided valid consent for the transaction;

in response to determining the data subject does not meet the one or more age criteria for the processing of personal data under the transaction, prompting, by one or more computer processors, a guardian associated with the data subject to provide the valid consent;

receiving, by one or more computer processors, from the guardian associated with the data subject, the valid consent; and

in response to receiving the valid consent from the guardian associated with the data subject, modifying, by one or more computer processors, the consent record to electronically store the indication of valid consent comprising an indication that the guardian has provided the valid consent for the transaction.

11. The computer-implemented data processing method of Concept 10, in any embodiment described herein, may comprise:

receiving a request from a data system associated with the entity to process a new piece of personal data associated with the data subject as part of the transaction;

in response to receiving the request to process the new piece of personal data, determining whether the consent record comprises the indication of valid consent;

in response to determining that the consent record comprises the indication of valid consent, automatically processing the new piece of personal data; and

in response to determining that the consent record does note comprise the indication of valid consent, automatically ceasing processing of the new piece of personal data

12. The computer-implemented data processing method of Concept 10, wherein:

prompting the guardian associated with the data subject to provide the valid consent comprises transmitting an electronic message to the guardian;

13. The computer-implemented data processing method of Concept 12, wherein:

the electronic message comprises a unique code; and

the computer-implemented data processing method further comprises:prompting the data subject to provide the unique code;receiving the unique code from the data subject; andin response to receiving the unique code from the data subject, modifying the consent record to electronically store the indication of valid consent comprising the indication that the guardian has provided the valid consent for the transaction.
14. The computer-implemented data processing method of Concept 10, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:

receiving the valid consent from the guardian, the valid consent comprising:consent to fulfill the transaction on behalf of the data subject; andconsent to fulfill one or more additional transactions on behalf of the data subject;

in response to receiving the valid consent from the identified guardian:modifying the consent record to electronically store the indication of valid consent comprising the indication that the guardian has provided the valid consent for the transaction; andstoring an electronic indication associated with the unique subject identifier of the consent to fulfill the one or more additional transactions on behalf of the data subject.
15. The computer-implemented data processing method of Concept 14, in any embodiment described herein, may comprise:

receiving a second request to initiate a second transaction between the entity and the data subject, the second request comprising the unique subject identifier;

in response to receiving the second request, generating, by the consent receipt management system, a second unique consent receipt key;

electronically storing the unique subject identifier, the second unique consent receipt key, and a unique second transaction identifier, in a second consent record;

electronically associating the unique subject identifier, the second unique consent receipt key, and the unique second transaction identifier in computer memory;

determining, based at least in part on the unique subject identifier, whether a guardian associated with the data subject has previously provided the consent to fulfill the one or more additional transactions on behalf of the data subject; and

in response to determining that the guardian associated with the data subject has previously provided the consent to fulfill the one or more additional transactions on behalf of the data subject, modifying the second consent record to electronically store an indication of a second valid consent.

16. The computer-implemented data processing method of Concept 15, wherein the computer-implemented data processing method, in any embodiment described herein, may comprise:

receiving a request from the data system associated with the entity to process a second new piece of personal data associated with the data subject as part of the second transaction;

in response to receiving the request to process the second new piece of personal data, determining whether the consent record comprises the indication of the second valid consent based at least in part on the consent to fulfill the one or more additional transactions on behalf of the data subject;

in response to determining that the consent record comprises the indication of the second valid consent automatically processing the second new piece of personal data.

17. A consent receipt management system, in any embodiment described herein, may comprise:

one or more processors; and

computer memory that stores a plurality of consent records associated with a unique subject identifier, each of the plurality of consent records being associated with a respective transaction of a plurality of transactions involving a data subject and an entity, wherein the consent receipt management system is configured for:receiving, at a particular consent capture point, a request to initiate a transaction between the entity and the data subject, the transaction involving collection or processing of personal data associated with the data subject by the entity as part of a processing activity undertaken by the entity that the data subject is consenting to as part of the transaction;in response to receiving the request:identifying a transaction identifier associated with the transaction;identifying a capture point identifier for the particular consent capture point;generating, a unique consent receipt key for the transaction; anddetermining a unique subject identifier for the data subject;requesting, from the data subject, at least one piece of identifying information;receiving the at least one piece of identifying information from the data subject;determining, based at least in part on the at least one piece of identifying information, an age of the data subject;electronically storing the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and the transaction identifier in computer memory;electronically associating the unique subject identifier, the unique consent receipt key, the capture point identifier, the age of the data subject, and the transaction identifier;generating a consent record for the transaction, the consent record comprising at least the unique subject identifier, the age of the data subject, and the unique consent receipt key;

receiving an indication that a data system associated with the entity has processed a new piece of personal data associated with the data subject as part of the transaction;

in response to receiving the indication that the data system associated with the entity has processed the new piece of personal data, determining, based on the age of the data subject and the transaction, whether the data subject meets one or more age criteria for the processing of data under the transaction;

in response to determining that the data subject meets the one or more age criteria, automatically processing the new piece of personal data; and

in response to determining that the data subject does not meet the one or more age criteria, automatically taking an action selected from the group consisting of:automatically ceasing processing of the new piece of personal data; andprompting the data subject to provide one or more contact details for a guardian of the data subject.
18. The consent receipt management system of Concept 17, wherein determining, based at least in part on the at least one piece of identifying information, the age of the data subject may comprise:

accessing, via one or more computer networks, one or more third-party data aggregation systems; and

determining, based at least in part on the at least one piece of identifying information using the one or more third-party data aggregation systems, the age of the data subject.

19. The consent receipt management system of Concept 17, wherein:

the at least one piece of identifying information comprises the age of the data subject; and

the consent receipt management system is configured for:prompting the data subject to provide a response to each of one or more questions;receiving the response to each of the one or more questions from the data subject;confirming the age of the data subject based at least in part on the response to each of the one or more questions.
20. The consent receipt management system of Concept 17, wherein the consent receipt management system, in any embodiment described herein, may be configured for:

accessing an electronic guardian registry for one or more data subjects;

determining, based at least in part on the one or more contact details for the guardian of the data subject using the electronic guardian registry, that the data subject has an identified registered guardian; and

communicating with the identified guardian, via the one or more contact details, to receive valid consent to fulfill the transaction on behalf of the data subject by:transmitting an electronic message to the identified guardian; andprompting the identified guardian to provide the valid consent via the electronic message.

Various other embodiments of the system, such as any embodiment described herein, may further include one or more features described in the listing of concepts below:

1. A computer-implemented data processing method for an organization to retain one or more pieces of personal data that have a legal basis for retention, in any embodiment described herein, may comprise:

identifying one or more pieces of personal data associated with a data subject based at least in part on one or more triggering actions;

identifying a storage location of each of the one or more pieces of personal data associated with the data subject;

in response to identifying the storage location of each of the one or more pieces of personal data associated with the data subject, automatically determining that a first portion of the one or more of the pieces of personal data has one or more legal bases for continued storage;

in response to determining that the first portion of the one or more of the pieces of personal data associated with the data subject has one or more legal bases for continued storage, automatically maintaining storage of the first portion of the one or more pieces of personal data; and

automatically facilitating deletion of a second portion of the one or more pieces of personal data associated with the data subject, wherein the second portion of the one or more pieces of personal data associated with the data subject is different from the first portion of the one or more pieces of personal data.

2. The computer-implemented data processing method of claim1, further comprising:

notifying the data subject that the second portion of the one or more pieces of the personal data is deleted.

3. The computer-implemented data processing method of concept 1, wherein the one or more triggering actions is a data subject access request submitted by the data subject.

4. The computer-implemented data processing method of concept 1, further comprising:

applying one or more storage attributes to the first portion of the one or more pieces of personal data; and

determining whether to maintain storage of the first portion of the one or more pieces of personal data based at least in part on the applying the one or more storage attribute to the first portion of the one or more pieces of personal data.

5. The computer-implemented data processing method of concept 4, wherein the one or more storage attributes comprises a storage time of the one or more pieces of personal data, and the method further comprising:

comparing the storage time of the one or more pieces of personal data to an authorized storage time for the organization to store the one or more pieces of personal data;

determining that the storage time of the one or more pieces of personal data is greater than the authorized storage time for the organization to store the one or more pieces of personal data; and

in response to determining that the storage time of the one or more pieces of personal data is greater than the authorized storage time for the organization to store the one or more pieces of personal data, automatically notifying one or more privacy officers.

6. The computer-implemented data processing method of concept 5, further comprising:

in response to determining that the storage time of the one or more pieces of personal data is greater than the authorized storage time for the organization to store the one or more pieces of personal data, automatically facilitating deletion of the first portion of the one or more pieces of personal data associated with the data subject.

7. The computer-implemented data processing method of concept 4, wherein the one or more storage attributes comprises a relevancy attribute of the one or more pieces of personal data, and the method further comprising:

determining that a privacy campaign associated with the one or more pieces of personal data is inactive;

in response to determining that a privacy campaign associated with the one or more pieces of personal data is inactive, automatically facilitating deletion of the first portion of the one or more pieces of personal data associated with the data subject.

8. The computer-implemented method of claim1, wherein the one or more legal bases for continued storage are selected from a group consisting of:

an ongoing legal case where the one or more pieces of personal data are to be retained;

consent from the data subject for the continued storage of the one or more pieces of personal data; and

an indication provided by the organization that the one or more pieces of personal data are a part of anonymized data.

9. The computer-implemented method of concept 1, further comprising:

providing the first portion of the one or more of the pieces of personal data associated with the data subject has one or more legal bases for continued storage to one or more privacy officers of the organization; and

receiving storage retention feedback from the one or more privacy officers associated with the first portion of the one or more of the pieces of personal data associated with the data subject.

10. The computer-implemented method of concept 9, wherein the storage retention feedback further comprises:

a selection of a first set of the first portion of the one or more pieces of personal data for which to maintain continued storage; and

automatically facilitating deletion of a second set of the first portion of the one or more pieces of personal data associated with the data subject.

11. A computer-implemented data processing method for an organization to retain one or more pieces of personal data that have a legal basis for retention, the method comprising:

identifying one or more pieces of personal data associated with a data subject based at least in part on one or more triggering actions;

identifying a storage location of each of the one or more pieces of personal data associated with the data subject;

in response to identifying the storage location of each of the one or more pieces of personal data associated with the data subject, automatically determining that a first portion of the one or more of the pieces of personal data has one or more legal bases for continued storage;

in response to determining that the first portion of the one or more of the pieces of personal data associated with the data subject has one or more legal bases for continued storage, automatically notifying one or more privacy officers of the organization of (i) the first portion of the one or more pieces of personal data, and (ii) the one or more legal bases for continued storage of the first portion of the one or more pieces of personal data; and

automatically facilitating deletion of a second portion of the one or more pieces of personal data associated with the data subject, wherein the second portion of the one or more pieces of personal data associated with the data subject is different from the first portion of the one or more pieces of personal data.

12. The computer-implemented data processing method of concept 11, further comprising:

notifying the data subject that the second portion of the one or more pieces of the personal data is deleted.

13. The computer-implemented data processing method of concept 11, wherein the one or more triggering actions is a data subject access request submitted by the data subject.

14. The computer-implemented data processing method of concept 11, further comprising:

applying one or more storage attributes to the first portion of the one or more pieces of personal data; and

determining whether to maintain storage of the first portion of the one or more pieces of personal data based at least in part on the applying the one or more storage attribute to the first portion of the one or more pieces of personal data.

15. The computer-implemented data processing method of concept 14, wherein the one or more storage attributes comprises a storage time of the one or more pieces of personal data, and the method further comprising:

comparing the storage time of the one or more pieces of personal data to an authorized storage time for the organization to store the one or more pieces of personal data;

determining that the storage time of the one or more pieces of personal data is greater than the authorized storage time for the organization to store the one or more pieces of personal data; and

in response to determining that the storage time of the one or more pieces of personal data is greater than the authorized storage time for the organization to store the one or more pieces of personal data, automatically notifying one or more privacy officers.

16. The computer-implemented data processing method of concept 15, further comprising:

in response to determining that the storage time of the one or more pieces of personal data is greater than the authorized storage time for the organization to store the one or more pieces of personal data, automatically facilitating deletion of the first portion of the one or more pieces of personal data associated with the data subject.

17. The computer-implemented data processing method of concept 14, wherein the one or more storage attributes comprises a relevancy attribute of the one or more pieces of personal data, and the method further comprising:

determining that a privacy campaign associated with the one or more pieces of personal data is inactive;

in response to determining t that a privacy campaign associated with the one or more pieces of personal data is inactive, automatically facilitating deletion of the first portion of the one or more pieces of personal data associated with the data subject.

18. The computer-implemented method of concept 11, wherein the one or more legal bases for continued storage are selected from a group consisting of:

an ongoing legal case where the one or more pieces of personal data are to be retained;

consent from the data subject for the continued storage of the one or more pieces of personal data; and

an indication provided by the organization that the one or more pieces of personal data are a part of anonymized data.

19. A computer-implemented data processing method for an organization to retain one or more pieces of personal data that have a legal basis for retention, in some embodiments, comprises:

identifying one or more pieces of personal data associated with a data subject based at least in part on one or more triggering actions;

automatically determining that a first portion of the one or more of the pieces of personal data has one or more legal bases for continued storage;

in response to determining that the first portion of the one or more of the pieces of personal data associated with the data subject has one or more legal bases for continued storage, automatically maintaining storage of the first portion of the one or more pieces of personal data;

providing the first portion of the one or more of the pieces of personal data associated with the data subject has one or more legal bases for continued storage to one or more privacy officers of the organization;

receiving storage retention feedback from the one or more privacy officers associated with the first portion of the one or more of the pieces of personal data associated with the data subject; and

automatically facilitating deletion of a second portion of the one or more pieces of personal data associated with the data subject, wherein the second portion of the one or more pieces of personal data associated with the data subject is different from the first portion of the one or more pieces of personal data.

20. The computer-implemented method of concept 19, wherein the storage retention feedback further comprises:

a selection of a first set of the first portion of the one or more pieces of personal data for which to maintain continued storage; and

automatically facilitating deletion of a second set of the first portion of the one or more pieces of personal data associated with the data subject.

Various other embodiments of the system, such as any embodiment described herein, may further include one or more features described in the listing of concepts below:

1. A computer-implemented data processing method for managing a consent receipt under a transaction, in particular embodiments, comprises:

receiving a request to initiate a transaction between the entity and the data subject;

providing, at the user interface, a privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

accessing the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

storing one or more provisions of the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

providing a user interface for consenting to the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

receiving a selection to consent to the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

in response to the selection, generating, by a third-party consent receipt management system, a consent receipt to the data subject, wherein the consent receipt includes the stored one or more provision of the privacy policy; and

storing, by the third-party consent receipt management system, the generated consent receipt.

2. The computer-implemented data processing method of concept 1, further comprising:

capturing one or more pieces of interaction data based at least in part on the data subject's interaction with the user interface for consenting to the privacy policy; and

storing the one or more pieces of interaction data with the generated consent receipt.

3. The computer-implemented data processing method of concept 2, wherein the one or more pieces of interaction data comprises an indication of whether the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
4. The computer-implemented data processing method of concept 3, wherein the one or more pieces of interaction data comprises an indication of whether the data subject scrolled to an ending portion of the privacy policy within the user interface for consenting to the privacy policy.
5. The computer-implemented data processing method of concept 3, wherein the one or more pieces of interaction data comprises tracking a period of time between (i) a first time that the data subject is presented with the user interface for consenting to the privacy policy and (ii) a second time that the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
6. The computer-implemented data processing method of concept 3, wherein the one or more pieces of interaction data comprises tracking a number of data subject interactions with the user interface for consenting to the privacy policy between (i) a first time that the data subject is presented with the user interface for consenting to the privacy policy and (ii) a second time that the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
7. The computer-implemented data processing method of concept 1, wherein the accessed privacy policy includes an electronic link to the privacy policy stored on one or more data assets of the entity.
8. A computer-implemented data processing method for managing a consent receipt under a transaction, in any embodiment described herein, may comprise:

providing a user interface for initiating a transaction between an entity and a data subject;

receiving a request to initiate a transaction between the entity and the data subject;

providing, at the user interface, a privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

accessing the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

storing one or more provision of the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

providing a user interface for consenting to the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

receiving a selection to consent to the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject; and

in response to the selection, generating, by a third-party consent receipt management system, a consent receipt to the data subject, wherein the consent receipt includes the stored one or more provision of the privacy policy.

9. The computer-implemented method of concept 8, further comprising:

storing, by the third-party consent receipt management system and in one or more data assets of the entity, the generated consent receipt.

10. The computer-implemented method of concept 9, further comprising:

capturing one or more pieces of interaction data based at least in part on the data subject's interaction with the user interface for consenting to the privacy policy; and

storing the one or more pieces of interaction data with the generated consent receipt.

11. The computer-implemented data processing method of concept 10, wherein the one or more pieces of interaction data comprises an indication of whether the data subject scrolled to an ending portion of the privacy policy within the user interface for consenting to the privacy policy.
12. The computer-implemented data processing method of concept 10, wherein the one or more pieces of interaction data comprises tracking a period of time between (i) a first time that the data subject is presented with the user interface for consenting to the privacy policy and (ii) a second time that the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
13. The computer-implemented data processing method of concept 10, wherein the one or more pieces of interaction data comprises tracking a number of data subject interactions with the user interface for consenting to the privacy policy between (i) a first time that the data subject is presented with the user interface for consenting to the privacy policy and (ii) a second time that the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
14. The computer-implemented data processing method of concept 9, wherein the accessed privacy policy includes an electronic link to the privacy policy stored on one or more data assets of the entity.
15. A computer-implemented data processing method for managing a consent receipt under a transaction, in various embodiments, comprises:

receiving a request to initiate a transaction between the entity and the data subject;

providing, at the user interface, a privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

accessing the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

providing a user interface for consenting to the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

receiving a selection to consent to the privacy policy associated with the entity and based at least in part on the request to initiate the transaction between the entity and the data subject;

in response to the selection, generating, by a third-party consent receipt management system, a consent receipt to the data subject, wherein the consent receipt includes the stored one or more provision of the privacy policy; and

storing, by the third-party consent receipt management system, the generated consent receipt.

16. The computer-implemented data processing method of concept 15, further comprising:

capturing one or more pieces of interaction data based at least in part on the data subject's interaction with the user interface for consenting to the privacy policy; and

storing the one or more pieces of interaction data with the generated consent receipt.

17. The computer-implemented data processing method of claim15, wherein the one or more pieces of interaction data comprises an indication of whether the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
18. The computer-implemented data processing method of concept 17, wherein the one or more pieces of interaction data comprises an indication of whether the data subject scrolled to an ending portion of the privacy policy within the user interface for consenting to the privacy policy.
19. The computer-implemented data processing method of concept 17, wherein the one or more pieces of interaction data comprises tracking a period of time between (i) a first time that the data subject is presented with the user interface for consenting to the privacy policy and (ii) a second time that the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.
20. The computer-implemented data processing method of concept 17, wherein the one or more pieces of interaction data comprises tracking a number of data subject interactions with the user interface for consenting to the privacy policy between (i) a first time that the data subject is presented with the user interface for consenting to the privacy policy and (ii) a second time that the data subject selected one or more pixels of the user interface for consenting to the privacy policy associated with viewing the privacy policy.

Various other embodiments of the system, such as any embodiment described herein, may further include one or more features described in the listing of concepts below:

1. A computer-implemented data processing method for scanning a website and tracking data subject interaction with the website to provide data subject consent parameters for the website, in any embodiment described herein, may comprise:

determining, by one or more processors, a data subject is interacting with a particular website;

determining, by one or more processors, one or more website parameters associated with the particular website, wherein determining the one or more website parameters associated with the particular website comprises:scanning, by one or more processors, the particular website to determine one or more website cookies that capture data subject information; anddetermining, by one or more processors, a website category of the particular website;

determining, by one or more processors, a geo-location of the data subject when the data subject is interacting with the particular website;

determining, by one or more processors, one or more data subject consent parameters based at least in part on the one or more website parameters associated with the particular website and the geo-location of the data subject when the data subject is interacting with the particular website; and

applying, by one or more processors, the one or more data subject consent parameters to the data subject interaction with the particular website.

2. The computer-implemented data processing method of concept 1, wherein the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular website;

determining, by one or more processors, whether the one or more data subject consent parameters are fulfilled;

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

3. The computer-implemented data processing method of concept 1, wherein the website category is based at least in part on whether the particular website provides one or more targeted advertisements to the data subject.

4. The computer-implemented data processing method of concept 1, wherein scanning the particular website to determine one or more website cookies that capture data subject information, further comprises:

identifying one or more website cookies that capture data subject information;

for each of the identified one or more website cookies,determining one or more types of personal data captured by each of the identified one or more website cookies; andstoring the one or more types of personal data captured by each of the identified one or more website cookies.
5. The computer-implemented data processing method of concept 1, wherein determining one or more data subject consent parameters further comprises:

accessing one or more privacy laws associated with the geo-location of the data subject; and

applying the one or more privacy laws as the one or more data subject consent parameters.

6. The computer-implemented data processing method of concept 1, wherein the one or more data subject consent parameters comprises at least in part that the data subject scroll to an ending portion of a particular webpage at the particular website for the data subject consent to be provided by the data subject, and the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular webpage of the particular website;

determining, by one or more processors, whether the data subject scrolled to the ending portion of a particular webpage at the particular website;

in response to determining that the data subject scrolled to the ending portion of a particular webpage at the particular website, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

7. The computer-implemented data processing method of concept 1, wherein the one or more data subject consent parameters comprises at least in part that the data subject select a button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data, and the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular webpage of the particular website;

determining, by one or more processors, whether the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data;

in response to determining that the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of the one or more pieces of personal data, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

8. A computer-implemented data processing method for scanning a website and tracking data subject interaction with the website to provide data subject consent parameters for the website, in any embodiment described herein, may comprise:

determining, by one or more processors, a data subject is interacting with a particular website;

determining, by one or more processors, one or more website parameters associated with the particular website, wherein determining the one or more website parameters associated with the particular website comprises:

scanning, by one or more processors, the particular website to determine one or more website cookies that capture data subject information;

determining, by one or more processors, a geo-location of the data subject when the data subject is interacting with the particular website;

determining, by one or more processors, one or more data subject consent parameters based at least in part on the one or more website parameters associated with the particular website and the geo-location of the data subject when the data subject is interacting with the particular website;

tracking, by one or more processors, the data subject interaction with the particular website;

determining, by one or more processors, whether the one or more data subject consent parameters are fulfilled;

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

9. The computer-implemented data processing method of concept 8, wherein the method further comprises:

determining, by one or more processors, a website category for the particular website, wherein website category is based at least in part on whether the particular website provides one or more targeted advertisements to the data subject.

10. The computer-implemented data processing method of concept 8, wherein scanning the particular website to determine one or more website cookies that capture data subject information, further comprises:

identifying one or more website cookies that capture data subject information;

for each of the identified one or more website cookies,determining one or more types of personal data captured by each of the identified one or more website cookies; and

storing the one or more types of personal data captured by each of the identified one or more website cookies.

11. The computer-implemented data processing method of concept 8, wherein determining one or more data subject consent parameters further comprises:

accessing one or more privacy laws associated with the geo-location of the data subject; and

applying the one or more privacy laws as the one or more data subject consent parameters.

12. The computer-implemented data processing method of concept 11, wherein accessing one or more privacy laws associated with the geo-location of the data subject further comprises:

determining whether one or more updates have been applied to the one or more privacy laws associated with the geo-location of the data subject; and

in response to determine that one or more updated have been applied to the one or more privacy laws associated with the geo-location of the data subject, accessing the one or more updated privacy laws associated with the geo-location of the data subject.

13. The computer-implemented data processing method of concept 1, wherein the one or more data subject consent parameters comprises at least in part that the data subject scroll to an ending portion of a particular webpage at the particular website for the data subject consent to be provided the data subject, and the method further comprises:

determining, by one or more processors, whether the data subject scrolled to the ending portion of a particular webpage at the particular website; and

in response to determining that the data subject scrolled to the ending portion of a particular webpage at the particular website, determining that the one or more data subject consent parameters are fulfilled.

14. The computer-implemented data processing method of concept 1, wherein the one or more data subject consent parameters comprises at least in part that the data subject select a button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data, and the method further comprises:

determining, by one or more processors, whether the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data; and

in response to determining that the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of the one or more pieces of personal data, determining that the one or more data subject consent parameters are fulfilled.

15. A computer-implemented data processing method for scanning a website and tracking data subject interaction with the website to provide data subject consent parameters for the website, in any embodiment described herein, may comprise:

determining, by one or more processors, a data subject is interacting with a particular website;

determining, by one or more processors, one or more website parameters associated with the particular website, wherein determining the one or more website parameters associated with the particular website comprises:scanning, by one or more processors, the particular website to determine one or more website cookies that capture data subject information; anddetermining, by one or more processors, a website category of the particular website;

determining, by one or more processors, a geo-location of the data subject when the data subject is interacting with the particular website;

determining, by one or more processors, one or more data subject consent parameters based at least in part on the one or more website parameters associated with the particular website and the geo-location of the data subject when the data subject is interacting with the particular website, wherein the one or more data subject consent parameters further comprise one or more privacy laws associated with the geo-location of the data subject; and

applying, by one or more processors, the one or more data subject consent parameters to the data subject interaction with the particular website.

16. The computer-implemented data processing method of concept 15, wherein the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular website;

determining, by one or more processors, whether the one or more data subject consent parameters are fulfilled;

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject; and

transmitting the consent receipt to the data subject.

17. The computer-implemented data processing method of concept 15, wherein the website category is based at least in part on whether the particular website provides one or more targeted advertisements to the data subject.

18. The computer-implemented data processing method of concept 15, wherein scanning the particular website to determine one or more website cookies that capture data subject information, further comprises:

identifying one or more website cookies that capture data subject information;

for each of the identified one or more website cookies,determining one or more types of personal data captured by each of the identified one or more website cookies; and

storing the one or more types of personal data captured by each of the identified one or more website cookies.

19. The computer-implemented data processing method of concept 15, wherein the one or more data subject consent parameters comprises at least in part that the data subject scroll to an ending portion of a particular webpage at the particular website for the data subject consent to be provided the data subject, and the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular webpage of the particular website;

determining, by one or more processors, whether the data subject scrolled to the ending portion of a particular webpage at the particular website;

in response to determining that the data subject scrolled to the ending portion of a particular webpage at the particular website, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject

20. The computer-implemented data processing method of concept 15, wherein the one or more data subject consent parameters comprises at least in part that the data subject select a button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data, and the method further comprises:

tracking, by one or more processors, the data subject interaction with the particular webpage of the particular website;

determining, by one or more processors, whether the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of one or more pieces of personal data;

in response to determining that the data subject selected the button provided on the particular website indicating that the data subject consents to the collection of the one or more pieces of personal data, determining that the one or more data subject consent parameters are fulfilled; and

in response to determining that the one or more data subject consent parameters are fulfilled, generating a consent receipt for the data subject.

Various other embodiments of the system, such as any embodiment described herein, may further include one or more features described in the listing of concepts below:

1. A computer-implemented data processing method for determining consent user interface validity for a provided consent user interface of a web form presenting consent information, in any embodiment described herein, may comprise:

accessing, by one or more processors, a consent user interface presented on a web form, wherein the web form comprises consent information presented to a data subject completing the web form;

determining, by one or more processors, one or more configuration attributes of the consent user interface;

accessing, by one or more processors, one or more privacy regulations associated with presenting consent information;

comparing, by one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations, determining, by one or more processors, a user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining, by one or more processors, whether the consent user interface is compliant with each of the one or more privacy regulations;

in response to determining that the consent user interface is not compliant with one or more privacy regulations, flagging the consent user interface in computer memory.

2. The computer-implemented data processing method of concept 1, wherein the method further comprises:

in response to determining that the consent user interface is not compliant with one or more privacy regulations, automatically modifying, by one or more processors, one or more configuration attributes of the consent user interface; and

storing a modified consent user interface, wherein the modified consent user interface includes the automatically modified one or more configuration attributes of the consent user interface.

3. The computer-implemented data processing method of concept 1, wherein the one or more configuration attributes is selected from a group consisting of:

a first selection option presented to the data subject for collection of personal data of the data subject;

a detailed selection option presented to the data subject for collection of each of one or more types of personal data of the data subject;

a position of a privacy policy within the consent user interface;

a second selection options for the data subject to be notified of one or more particular types of personal data collected by the system; and

one or more pieces of information collected by one or more cookies provided in the web form.

4. The computer-implemented data processing method of concept 1, wherein determining the user interface consent score of the consent user interface further comprises:

for each of the one or more configuration attributes of the consent user interface,comparing each particular configuration attribute to the one or more privacy regulations; andcalculating a configuration attribute level of compliance for each particular configuration attribute based at least in part on comparing the particular configuration attribute to the one or more privacy regulations; and

calculating the user interface consent score based at least in part on each calculated configuration attribute level of compliance.

5. The computer-implemented data processing method of concept 4, wherein determining whether the consent user interface is compliant with each of the one or more privacy regulations further comprising:

comparing the user interface consent score to a threshold user interface consent score determined based at least in part on each of the one or more privacy regulations;

determining whether the user interface consent score is less than the threshold user interface consent score; and

in response to determining that the user interface consent score is less than the threshold user interface consent score, determining that the consent user interface is not compliant with the one or more privacy regulations.

6. The computer-implemented data processing method of concept 5, wherein the threshold user interface consent score is provided by one or more privacy officers of an entity associated with the web form.

7. The computer-implemented data processing method of concept 1, further comprising:

determining, by one or more processors, that one or more privacy regulation updates have been provided to the one or more privacy regulations;

in response to determining that the one or more privacy regulation updates have been provided to the one or more privacy regulations, accessing, by one or more processors, the updated one or more privacy regulations;

comparing, by one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations, determining, by one or more processors, an updated user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining, by one or more processors, whether the consent user interface is compliant with each of the one or more updated privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more updated privacy regulations, flagging the consent user interface as non-compliant with the one or more updated privacy regulations.

8. The computer-implemented data processing method of concept 7, wherein determining that one or more privacy regulation updates have been provided to the one or more privacy regulations further comprises automatically determining that one or more privacy regulation updates have been provided to the one or more privacy regulations.
9. A computer-implemented data processing method for determining consent user interface validity for a provided consent user interface of a web form presenting consent information, in any embodiment described herein, may comprise:

accessing, by one or more processors, a consent user interface presented on a web form, wherein the web form comprises consent information presented to a data subject completing the web form;

determining, by one or more processors, one or more configuration attributes of the consent user interface;

accessing, by one or more processors, one or more privacy regulations associated with presenting consent information;

comparing, by one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations;

determining, by one or more processors, whether the consent user interface is compliant with each of the one or more privacy regulations;

in response to determining that the consent user interface is not compliant with one or more privacy regulations, flagging the consent user interface.

10. The computer-implemented data processing method of concept 9, wherein the method further comprises:

in response to determining that the consent user interface is not compliant with one or more privacy regulations, automatically modifying, by one or more processors, one or more configuration attributes of the consent user interface; and

storing a modified consent user interface, wherein the modified consent user interface includes the automatically modified one or more configuration attributes of the consent user interface.

11. The computer-implemented data processing method of concept 9, wherein the one or more configuration attributes is selected from a group consisting of:

a first selection option presented to the data subject for collection of personal data of the data subject;

a detailed selection option presented to the data subject for collection of each of one or more types of personal data of the data subject;

a position of a privacy policy within the consent user interface;

a second selection options for the data subject to be notified of one or more particular types of personal data collected by the system; and

one or more pieces of information collected by one or more cookies provided in the web form.

12. The computer-implemented data processing method of concept 9, further comprising:

for each of the one or more configuration attributes of the consent user interface,comparing each particular configuration attribute to the one or more privacy regulations, andcalculating a configuration attribute level of compliance for each particular configuration attribute based at least in part on comparing the particular configuration attribute to the one or more privacy regulations; and

calculating a user interface consent score based at least in part on each calculated configuration attribute level of compliance.

13. The computer-implemented data processing method of concept 12, wherein determining whether the consent user interface is compliant with each of the one or more privacy regulations further comprising:

comparing the user interface consent score to a threshold user interface consent score determined based at least in part on each of the one or more privacy regulations;

determining whether the user interface consent score is less than the threshold user interface consent score; and

in response to determining that the user interface consent score is less than the threshold user interface consent score, determining that the consent user interface is not compliant with the one or more privacy regulations.

14. The computer-implemented data processing method of concept 13, further comprising:

determining, by one or more processors, that one or more privacy regulation updates have been provided to the one or more privacy regulations;

in response to determining that the one or more privacy regulation updates have been provided to the one or more privacy regulations, accessing, by one or more processors, the updated one or more privacy regulations;

comparing, by one or more processors, the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations, determining, by one or more processors, an updated user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining, by one or more processors, whether the consent user interface is compliant with each of the one or more updated privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more updated privacy regulations, flagging the consent user interface as non-compliant with the one or more updated privacy regulations.

15. A data processing consent user interface validity system, in any embodiment described herein, may comprise:

one or more computer processors;

computer memory; and

a computer-readable medium storing computer-executable instructions that, when executed by the one or more computer processors, cause the one or more computer processors to perform operations comprising:accessing a consent user interface presented on a web form, wherein the web form comprises consent information presented to a data subject completing the web form;determining one or more configuration attributes of the consent user interface;accessing one or more privacy regulations associated with presenting consent information;comparing the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more privacy regulations, determining a user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining whether the consent user interface is compliant with each of the one or more privacy regulations;

in response to determining that the consent user interface is not compliant with one or more privacy regulations, flagging the consent user interface.

16. The data processing consent user interface validity system of concept 15, further comprising:

in response to determining that the consent user interface is not compliant with one or more privacy regulations, automatically modifying one or more configuration attributes of the consent user interface; and

storing a modified consent user interface, wherein the modified consent user interface includes the automatically modified one or more configuration attributes of the consent user interface.

17. The data processing consent user interface validity system of concept 15, wherein the one or more configuration attributes is selected from a group consisting of:

a first selection option presented to the data subject for collection of personal data of the data subject;

a detailed selection option presented to the data subject for collection of each of one or more types of personal data of the data subject;

a position of a privacy policy within the consent user interface;

a second selection options for the data subject to be notified of one or more particular types of personal data collected by the system; and

one or more pieces of information collected by one or more cookies provided in the web form.

18. The data processing consent user interface validity system of concept 15, wherein determining the user interface consent score of the consent user interface further comprises:

for each of the one or more configuration attributes of the consent user interface,comparing each particular configuration attribute to the one or more privacy regulations;calculating a configuration attribute level of compliance for each particular configuration attribute based at least in part on comparing the particular configuration attribute to the one or more privacy regulations; and

calculating the user interface consent score based at least in part on each calculated configuration attribute level of compliance.

19. The data processing consent user interface validity system of concept 18, wherein determining whether the consent user interface is compliant with each of the one or more privacy regulations further comprising:

comparing the user interface consent score to a threshold user interface consent score determined based at least in part on each of the one or more privacy regulations;

determining whether the user interface consent score is less than the threshold user interface consent score; and

in response to determining that the user interface consent score is less than the threshold user interface consent score, determining that the consent user interface is not compliant with the one or more privacy regulations.

20. The data processing consent user interface validity system of concept 15, further comprising:

Determining that one or more privacy regulation updates have been provided to the one or more privacy regulations;

in response to determining that the one or more privacy regulation updates have been provided to the one or more privacy regulations, accessing the updated one or more privacy regulations;

comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations;

in response to comparing the one or more configuration attributes of the consent user interface to each of the one or more updated privacy regulations, determining an updated user interface consent score of the consent user interface with respect to each of the one or more privacy regulations;

determining whether the consent user interface is compliant with each of the one or more updated privacy regulations; and

in response to determining that the consent user interface is not compliant with one or more updated privacy regulations, flagging the consent user interface as non-compliant with the one or more updated privacy regulations.

Various other embodiments of the system, such as any embodiment described herein, may further include one or more features described in the listing of concepts below:

1. A computer-implemented data processing method for sharing data subject consent data between a WebView associated with an entity and a native application associated with the entity, in any embodiment described herein, may comprise:

receiving, by one or more processors, data subject consent data provided from a data subject at a WebView associated with an entity, the WebView being within the native application;

translating, by one or more processors, the data subject consent data provided at the WebView associated with the entity for processing within the native application associated with the entity;

electronically providing, by one or more processors, the translated data subject consent data for processing within the native application associated with the entity; and

electronically providing, by one or more processors, the data subject consent data to the consent receipt management system for processing.

2. The computer-implemented data processing method of concept 1, further comprising:

storing, by one or more processors, the data subject consent data provided at the WebView associated with the entity.

3. The computer-implemented data processing method of concept 1, wherein receiving the data subject consent data provided at a WebView associated with an entity, further comprises:

receiving one or more cookies identifying the data subject consent data provided at the WebView associated with the entity; and

translating the data subject consent data based on at least one value in the one or more cookies.

4. The computer-implemented data processing method of concept 3, the method further comprising:

accessing the at least one value in the one or more cookies;

storing the at least one value in a mobile software development kit for the native application; and

using the at least one value to modify at least one user preference database value associated with the native application.

5. The computer-implemented data processing method of concept 3, the method further comprising:

accessing, by the native application, the at least one value to determine the data subject consent data for use by the application.

6. The computer-implemented data processing method of concept 5, wherein:

the WebView is a first instance of a WebView within the native application; and

the method further comprises:

receiving, at s second instance of the WebView, a request to perform a second action requiring consent, from the data subject, for particular data processing;

determining, based on the translated data subject consent data, whether the data subject has previously provided the required consent within the first instance of the WebView;

in response to determining that the data subject has previously provided the required consent within the first instance of the WebView, performing the second action within the second instance of the WebView.

7. The computer-implemented data processing method of concept 6, wherein performing the second action comprises performing the second action without re-prompting the data subject to provide the consent within the second instance of the WebView.

8. The computer-implemented data processing method of concept 6, the method further comprising:

receiving, at the native application, a request to perform an action requiring consent, from the data subject, for particular data processing;

determining, based on the translated data subject consent data, whether the data subject has previously provided the required consent within the WebView;

in response to determining that the data subject has previously provided the required consent within the WebView, performing the action within the native application.

9. The computer-implemented data processing method of concept 8, wherein:

translating the data subject consent data provided at the WebView comprises:setting at least one cookie for a domain loaded in the WebView;extracting at least one value from the at least one cookie; andstoring the at least one value in a non-cookie format within the native application; and.

electronically providing the translated data subject consent data for processing within the native application associated comprises storing the at least one value in the non-cookie format within the native application locally on a computing device running the native application.

10. A computer-implemented data processing method for sharing data subject consent data between a WebView and a native application loading the WebView, in any embodiment described herein, may comprise:

receiving, by one or more processors, from a data subject, within the native application, consent to process one or more pieces of personal data, the consent to process the one or more pieces of personal data comprising one or more user preferences;

in response to receiving the consent to process the one or more pieces of personal data, building, by one or more processors, at least one cookie, the at least one cookie defining at least one value based at least in part on the one or more user preferences provided with the consent to process the one or more pieces of personal data;

receiving, by one or more processors, a request to load a particular web domain within a WebView in the native application;

in response to receiving the request to load the particular web domain within the WebView in the native application:transmitting a request to the particular web domain to load a particular website within the WebView; andsetting the at least one cookie for the particular website by:appending the at least one cookie to the request to load the particular website; andin response to receiving the at least one cookie at the particular web domain, modifying at least one WebView cookie based on the at least one value.
11. The computer-implemented data processing method of concept 10, the method further comprising:

accessing at least one feature on the particular website within the WebView that requires the consent to process the one or more pieces of personal data without re-prompting the data subject to provide the consent to process the one or more pieces of personal data.

12. The computer-implemented data processing method of concept 11, wherein accessing the at least one feature on the particular website within the WebView that requires the consent to process the one or more pieces of personal data without re-prompting the data subject to provide the consent to process the one or more pieces of personal data comprises utilizing the consent to process the one or more pieces of personal data provided within the native application.
13. The computer-implemented data processing method of concept 11, wherein the consent to process the one or more pieces of personal data comprises consent to the use of the at least one cookie by the particular web domain.
14. The computer-implemented data processing method of concept 10, wherein building the at least one cookie comprises storing the at least one cookie in a storage location selected from the group consisting of:one or more storage locations local to a computing device running the native application; andone or more remote servers.
15. A computer-implemented data processing method for sharing data subject consent data between a WebView associated with an entity and a native application associated with the entity, in any embodiment described herein, may comprise:

receiving, from a data subject, by one or more processors, data subject consent data provided at the native application associated with an entity;

translating, by one or more processors, the data subject consent data provided at the native application associated with the entity for storage in a storage location accessible by a WebView associated with the entity;

electronically providing, by one or more processors, the translated data subject consent data to the storage location accessible by the WebView associated with the entity for processing within the WebView associated with the entity;

receiving, at the WebView, a request to perform an action requiring consent, from the data subject, for particular data processing;

determining, based on the translated data subject consent data, whether the data subject has previously provided the required consent within the native application;

in response to determining that the data subject has previously provided the required consent within the native application, performing the action within the WebView.

16. The computer-implemented data processing method of concept 15, wherein electronically providing the translated data subject consent data to the storage location accessible by the WebView associated with the entity for processing within the WebView associated with the entity comprises appending the translated data subject consent data to a header of a URL request sent from the native application to the WebView.
17. The computer-implemented data processing method of concept 15, the method comprising:

receiving, from the native application, a request to launch the WebView; and

in response to receiving the request to launch the WebView, launching, by one or more processors, the WebView in the native application.

18. The computer-implemented data processing method of concept 17, wherein:

launching the WebView in the native application comprises directing the WebView to load a particular domain within the WebView; and

translating the data subject consent data provided at the native application comprises setting at least one cookie for the domain.

19. The computer-implemented data processing method of concept 18, wherein performing the action comprises performing the action within the WebView without prompting the data subject to provide the consent within the WebView.

20. The computer-implemented data processing method of concept 15, the storage location is selected from the group consisting of:

one or more storage locations local to a computing device running the native application; andone or more remote servers.

