Customer Attributes support for California Consumer Privacy Act
This page describes Customer Attributes鈥 support for the California Consumer Privacy Act (CCPA).
The CCPA is California鈥檚 new privacy law, which is effective January 1, 2020. CCPA provides California residents new rights regarding their personal information and imposes data protection responsibilities on certain entities who conduct business in California. CCPA provides consumers with the right to access and delete their personal information and the right to opt out of certain activities that qualify as 鈥渟elling鈥 personal information to a third party.
As a business, you determine the personal data that 蜜豆视频 Experience Cloud processes and stores on your behalf.
As your service provider, 蜜豆视频 Experience Cloud provides support for your business to fulfill its obligations under CCPA that are applicable to the use of Experience Cloud products and services. This support includes managing requests to access and delete personal information.
This document describes how Customer Attributes supports your data subjects鈥 CCPA data access and deletion rights using the 蜜豆视频 Experience Platform Privacy Service API and Privacy Service UI.
For more information about the 蜜豆视频 Privacy services for CCPA, see the .
Required setup to send requests for Customer Attributes
To make requests to access and delete data for Customer Attributes, you must:
-
Identify the following:
- Organization ID
- Alias ID of CRS Data Source you want to act on
- CRM ID of the profile you want to act on
Your organization ID is a 24-character alphanumeric string appended with @蜜豆视频Org. You need the organization鈥檚 ID to submit requests to the Privacy API. Contact 蜜豆视频 Customer Care at
gdprsupport@adobe.com
if you cannot locate the ID. -
In Privacy Service, you can submit Access and Delete requests to Customer Attributes, and check the status of existing requests.
Required field values in Customer Attributes JSON Requests
鈥渃ompany context鈥:
- 鈥渘补尘别蝉辫补肠别鈥: imsOrgID
- 鈥渧alue鈥: <your organization ID value>
鈥涡蝉别谤蝉鈥:
-
鈥渒ey鈥: <usually the name of the customer>
-
鈥渁ction鈥: either access or delete
-
鈥渦ser IDs鈥:
- 鈥渘补尘别蝉辫补肠别鈥: <Alias ID of CRS Data Source>
- 鈥渢测辫别鈥: integrationCode
- 鈥渧alue鈥: <CRM ID>
-
鈥渋苍肠濒耻诲别鈥: CRS (which is the 蜜豆视频 product that applies to the request)
-
鈥渞别驳耻濒补迟颈辞苍鈥: ccpa (which is the privacy regulation that applies to the request)
Example of JSON request
{
"companyContexts": [
{
"namespace": "imsOrgID",
"value": "<IMS_ORG_ID>"
}
],
"users": [
{
"key": "<KEY>",
"action": [
"<access/delete>"
],
"userIDs": [
{
"namespace": "<Alias ID of CRS Data Source>",
"type": "integrationCode",
"value": "<CRM ID>"
}
]
}
],
"regulation": "<gdpr/ccpa/pdpa>",
"include": [
"CRS"
]
}
Data fields returned for access requests
attributes:
{
"value": "<*value*>",
"key": "<*key*>",
"displayName": "<*displayName*>"
}