Question 1

What is GDPR?

Accepted Answer

The General Data Protection Regulation (GDPR) is the European privacy and security law with the goal of safeguarding and protecting the personal data privacy of EU residents. It was approved by the European Union (EU) and put into effect on May 25th, 2018. GDPR imposes Data privacy & security obligations on Organizations that process the personal data of EU residents. The GDPR has cross-border enforcement with harsh penalties that can reach up to 4% of a company’s annual revenues. Companies that have failed to comply with the GDPR have paid fines of millions of euros.

Question 2

Does GDPR apply to my organization?

Accepted Answer

If your Organization collects data related to people in the EU, then you will be required to comply with GDPR, irrespective of where your organization is physically located or registered.

Question 3

Does GDPR apply to Non-profits?

Accepted Answer

Yes.GDPR applies to For-profit & Non-profits entities

Question 4

How can I make sure that my Salesforce is GDPR compliant?

Accepted Answer

CRM systems such as your Salesforce Org may contain personal data of your prospects, customers, employees, and partners. To ensure GDPR compliance, you can standardize, automate and enforce GDPR-specific requirements with Cloud Compliance’s Apps that are available from AppExchange. Some common use cases where Salesforce customers use our Apps include: Generate a personal data inventory and conduct Data Protection Impact Assessments (DPIA) (Use our Personal Data Discovery) Automate Data Portability, Right To Be Forgotten (RTBF), and other Subject Access Requests (SAR) (Use our Privacy Rights Automation) Mask Sandbox Data to Enforce Data Security (Use our Sandbox DataMasker) Drive transparency and audit-readiness in your privacy disclosures (Use our policy & Notice Management) Solve consent fragmentation with an enterprise-wide consent and communication preference repository in your Salesforce org (Use our Consent Management) Orchestrate processing of RTBF & portability DSARs across all Salesforce Orgs (Prod. link)

Question 5

What’s the difference between GDPR and CPRA/CCPA?

Rohit Kamble · Accepted Answer

GDPR is the framework legislation of Europe while CCPA & CPRA are the framework legislations of California.

The essence of both these laws is the same - to protect the data privacy of their respective constituents. GDPR applies to EU residents while CPRA/CCPA applies to Californian residents.

They do differ in terms of their requirements also. Please refer to this short video for additional information.

Question 6

Do you have any additional resources?

Rohit Kamble · Accepted Answer

Data Privacy and Regulation matrix - GDPR CCPA LGPD PDPB.pdf

Question 7

What is LGPD?

Accepted Answer

Lei Geral de Proteção de Dados Pessoais (LGPD) or General Personal Data Protection Law (Brazil), is a statutory law on data protection and privacy in the Federative Republic of Brazil which came into effect on September 18, 2020. Its goal is to safeguard and protect the personal data privacy of individuals in Brazil. The LGPD provides provisions and requirements related to the processing of the personal data of individuals in Brazil.

Question 8

Does LGPD apply to me?

Accepted Answer

If your organization offers goods and services in the jurisdictions or processes personal data in Brazil region, then yes, LGPD will apply to you, irrespective of where your organization is physically located or registered.

Question 9

Does LGPD apply to Non-profits?

Rohit Kamble · Accepted Answer

Yes. LGPD applies to For-profit & Non-profits entities.

Question 10

How can I make sure that my Salesforce is LGPD compliant?

Rohit Kamble · Accepted Answer

CRM systems such as your Salesforce Org may contain personal data of your prospects, customers, employees, and partners.

To ensure LGPD compliance, you can standardize, automate and enforce CPRA-specific requirements with Cloud Compliance’s Apps that are available from AppExchange.

Some common use cases where Salesforce customers use our Apps include:

Generate a personal data inventory and conduct Data Protection Impact Assessments (DPIA) (Use our Personal Data Discovery)
Automate Data Portability, Right To Be Forgotten (RTBF), and other Subject Access Requests (SAR) (Use our Privacy Rights Automation)
Mask Sandbox Data to Enforce Data Security (Use our Sandbox DataMasker)
Drive transparency and audit-readiness in your privacy disclosures (Use our policy & Notice Management)
Solve consent fragmentation with an enterprise-wide consent and communication preference repository in your Salesforce org (Use our Consent Management)

Question 11

What’s the difference between GDPR and LGPD?

Rohit Kamble · Accepted Answer

GDPR is the framework legislation of Europe while LGPD is the framework legislation of Brazil.

The essence of both these laws is the same - to protect the data privacy of their respective constituents. GDPR applies to EU residents while LGPD applies to residents in Brazil.

Both these laws have their differences as well as similarities in terms of enforcement.

Question 12

Do you have any additional resources?

Rohit Kamble · Accepted Answer

<ul><li><a href="https://drive.google.com/file/d/1WYYBzgdTs2Bp61rCDxMe5UYweu-WkAiT/view?usp=sharing">Data Privacy and Regulation matrix - GDPR CCPA LGPD PDPB.pdf</a></li><li><a href="https://drive.google.com/file/d/1hb4e7prIOsu0e079wyKutaU4tBOkraPr/view?usp=sharing">LGPD Compliance - Salesforce data privacy steps for Brazil</a></li></ul>

Question 13

What is CPRA?

Accepted Answer

The California Privacy Rights Act (CPRA) is a state-wide data privacy bill passed into legislation in 2020 - with the goal of safeguarding and protecting the personal data privacy of residents of California. CPRA is the result of a ballot initiative supported by a data privacy advocacy group called Californians for Consumer Privacy. CPRA adds more elements to CCPA to make it more comprehensive and far-reaching. CPRA will come into effect from January 1st, 2023.

Question 14

Does CPRA apply to me?

Accepted Answer

CPRA applies to your organization if it - 1. Generates 25 Million dollars in gross revenue. 2. Has more than 100,000 consumers in California. 3. Derives more than 50% of the revenue from the sharing of personal data. If your organization meets the above three criteria, then CPRA would apply irrespective of where your organization is physically located or registered. CPRA does not apply to Non-Profits

Question 15

Does CPRA apply to Non-Profits?

Rohit Kamble · Accepted Answer

No. Non-profits are exempt from CPRA enforcement.

Question 16

How can I make sure that my Salesforce is CPRA compliant?

Rohit Kamble · Accepted Answer

CRM systems such as your Salesforce Org may contain personal data of your prospects, customers, employees, and partners.

To ensure CPRA compliance, you can standardize, automate and enforce CPRA-specific requirements with Cloud Compliance’s Apps that are available from AppExchange.

Some common use cases where Salesforce customers use our Apps include:

Generate a personal data inventory and conduct Data Protection Impact Assessments (DPIA) (Use our Personal Data Discovery)
Automate Data Portability, Right To Be Forgotten (RTBF), and other Subject Access Requests (SAR) (Use our Privacy Rights Automation)
Mask Sandbox Data to Enforce Data Security (Use our Sandbox DataMasker)
Drive transparency and audit-readiness in your privacy disclosures (Use our policy & Notice Management)
Solve consent fragmentation with an enterprise-wide consent and communication preference repository in your Salesforce org (Use our Consent Management)

Orchestrate processing of RTBF & portability DSARs across all Salesforce Orgs (Prod. link)

Question 17

What’s the difference between GDPR and CPRA/CCPA?

Rohit Kamble · Accepted Answer

GDPR is the framework legislation of Europe while CCPA & CPRA are the framework legislations of California.

The essence of both these laws is the same - to protect the data privacy of their respective constituents. GDPR applies to EU residents while CPRA/CCPA applies to Californian residents.

They do differ in terms of their requirements also. Please refer to this short video for additional information.

Question 18

Do you have any additional resources?

Rohit Kamble · Accepted Answer

<ul><li><a href="https://drive.google.com/file/d/1WYYBzgdTs2Bp61rCDxMe5UYweu-WkAiT/view?usp=sharing">Data Privacy and Regulation matrix - GDPR CCPA LGPD PDPB.pdf</a></li><li><a href="https://drive.google.com/file/d/1EPnzzEDPxWzvqvoB5k2xBWDYZJEwNmmX/view?usp=sharing">CPRA Compliance - Salesforce data privacy steps for California</a></li></ul>

Products

Key Features

Key Features

Key Features

Key Features

Key Features

Key Features

Key Features

Regulations

Capabilities

Capabilities

Capabilities

Integrations

Capabilities

Capabilities

Capabilities

Category: Uncategorized

Customer Stories

Partnership Program

Cloud Compliance – GDPR

Cloud Compliance – Policy & Notice Management

Cloud Compliance – API

Cloud Compliance – Omni Channel

Cloud Compliance – Email Marketing

Cloud Compliance – LGPD

Cloud Compliance – CCPA

Cloud Compliance – Sandbox Data Masker

Products

Solutions

Success

Company

We Your Privacy

Exercise your privacy rights

Our Policies