DSAR Processing Systems for Data Subject Access Requests

ChangeBridge: Patent Grants - Business Methods (G06Q)

Published March 31st, 2026

Detected March 31st, 2026

Summary

The USPTO granted patent US12591828B2 to OneTrust, LLC for data processing systems that process Data Subject Access Requests (DSARs). The system enables organizations to present webforms on multiple websites, automatically route requests to designated individuals, and track request status through a single user interface. The patent contains 20 claims and was filed on March 3, 2023.

View original document View source feed page

What changed

OneTrust, LLC has been granted patent US12591828B2 for DSAR processing systems. The invention covers methods for presenting webforms on multiple websites to receive Data Subject Access Requests, automatically routing those requests to designated individuals for processing, and communicating request status through a unified interface. The patent's CPC classifications indicate relevance to data security (G06F 21/552, G06F 21/577) and privacy administration (G06F 21/6245).

This patent grant does not impose new compliance obligations on regulated entities. Companies already subject to DSAR requirements under CCPA/CPRA or GDPR should be aware that privacy technology vendors may leverage this patented technology. No immediate action is required; however, organizations evaluating DSAR management solutions should consider potential licensing implications when selecting vendors.

Source document (simplified)

← USPTO Patent Grants

Data processing systems for fulfilling data subject access requests and related methods

Grant US12591828B2 Kind: B2 Mar 31, 2026

Assignee

OneTrust, LLC

Inventors

Kabir A. Barday, Jason L. Sabourin, Jonathan Blake Brannon, Mihir S. Karanjkar, Kevin Jones

Abstract

Various Data Subject Access Request (DSAR) processing systems are adapted for presenting a first webform on a first web site, the first webform being adapted to receive DSAR's and to route the requests to a first designated individual for processing; presenting a second webform on a second web site, the second webform being adapted to receive DSAR's and to route the requests to a second designated individual for processing; receiving, via the first webform, a first DSAR; at least partially in response to the receiving the first DSAR, automatically routing the first DSAR to the first designated individual for handling; receiving, via the second webform, a second DSAR; at least partially in response to the receiving the second DSAR, automatically routing the second DSAR to the second designated individual for handling; and communicating a status of both the first DSAR and the second DSAR via a single user interface.