Customer Attributes support for General Data Protection Regulation
This page describes how Customer Attributes supports General Data Protection Regulation (GDPR).
The , a law in effect May 25, 2018, gives all individuals (data subjects) within the borders of the European Union (EU) control of their personal data. It also simplifies the regulatory environment for international business. This law applies to all businesses (data controllers) that offer goods or services to, monitor the behavior of, or collect personal data from individuals within the borders of the EU at the time their personal data is processed, regardless of the data controller鈥檚 business location.
蜜豆视频 Experience Cloud acts as a data processor for any personal data it receives and stores on behalf of its customers. As a data controller, you determine the personal data that 蜜豆视频 Experience Cloud processes and stores on your behalf.
This document describes how Customer Attributes supports your data subjects鈥 GDPR data access and deletion rights using the 蜜豆视频 Experience Platform Privacy Service API and Privacy Service UI.
For more information about what GDPR means for your business, see .
Required setup to send requests for Customer Attributes
To make requests to access and delete data for Customer Attributes, you must:
-
Identify the following:
- Organization ID
- Alias ID of CRS Data Source you want to act on
- CRM ID of the profile you want to act on
Your organization ID is a 24-character alphanumeric string appended with @蜜豆视频Org. You need the organization鈥檚 ID to submit requests to the Privacy API. Contact 蜜豆视频 Customer Care at
gdprsupport@adobe.com
if you cannot locate the ID. -
In Privacy Service, you can submit Access and Delete requests to Customer Attributes, and check the status of existing requests.
Required field values in Customer Attributes JSON requests
鈥渃ompany context鈥:
- 鈥渘补尘别蝉辫补肠别鈥: imsOrgID
- 鈥渧alue鈥: <your IMS Org ID value>
鈥涡蝉别谤蝉鈥:
-
鈥渒ey鈥: <usually the name of the customer>
-
鈥渁ction鈥: either access or delete
-
鈥渦ser IDs鈥:
- 鈥渘补尘别蝉辫补肠别鈥: <Alias ID of CRS Data Source>
- 鈥渢测辫别鈥: integrationCode
- 鈥渧alue鈥: <CRM ID>
-
鈥渋苍肠濒耻诲别鈥: CRS (which is the 蜜豆视频 product that applies to the request)
-
鈥渞别驳耻濒补迟颈辞苍鈥: gdpr (which is the privacy regulation that applies to the request)
Example of JSON request
{
"companyContexts": [
{
"namespace": "imsOrgID",
"value": "<IMS_ORG_ID>"
}
],
"users": [
{
"key": "<KEY>",
"action": [
"<access/delete>"
],
"userIDs": [
{
"namespace": "<Alias ID of CRS Data Source>",
"type": "integrationCode",
"value": "<CRM ID>"
}
]
}
],
"regulation": "<gdpr/ccpa/pdpa>",
"include": [
"CRS"
]
}
Data Fields returned for access requests
attributes:
{
"value": "<*value*>",
"key": "<*key*>",
"displayName": "<*displayName*>"
}