GDPR
Salesforce solutions for GDPR implementation
Key Considerations
Discover Personal Data
Article 6, 30, 32, 35
Data Inventory, Record of Processing Activity (ROPA), Data Privacy Impact Assessment (DPIA)
Track and inventorize Personal Data across your enterprise. Document data collection and movement both for internal and to 3rd parties.
Assess your organization's posture for GDPR compliance, identify gaps, and mitigate risks. Use our pre-built templates or create custom assessments for your unique requirements.
Automate Privacy Rights
Article 12, 15, 16, 17, 18, 19, 20, 21
Right of Access, Rectification, Erasure (Right To Be Forgotten), Restriction, Portability, Right to Object, Self-serve Privacy center
Enable branded self-service request portal for common Subject Access Requests (SAR) for seamless customer care.
Simplify the logging of SARs, verification process, generation and delivery. Support multiple regulatory requirements such as offering different Portability documents for GDPR vs CCPA.
Manage Consent
Article 6, 7, 8, 22
Manage Consent, Communication Preferences, Automated Decision making including Profiling
Obtain and track Consent to ensure data processing is in compliance with privacy laws. Cloud Compliance offers an full lifecycle including a self-service capability.
Manage Communication Preferences and consent in a centralized repository to avoid Consent fragmentation. Integrate consent and communication preferences with Salesforce, Marketing and other systems.
Minimize Personal Data
Article 5, 32
Data Retention - Automated anonymize and delete
Minimize data for GDPR compliance and limit breach exposure by reducing your data footprint.
Automate retention policy enforcement in Salesforce with precise control on removal of personal information. Free up Salesforce storage or preserve reporting and others with the flexiblity to Delete or Anonymize records.
Manage Policy and Notices
Article 12, 13, 14
Data Processing Transparency - Disclosures, Notices etc,
Manage and update policies in Salesforce for multiple regulations, countries and languages.
Disclose privacy notices across websites, mobile apps and others. Securely collect audit-ready proof of acceptance during customer onboarding and other business processes.
Mask Sandbox Data
Article 32
Pseudonymize or Anonymize Personal Data to prevent Sandbox induced Data Breach
Protect your organization by masking or erasing sensitive data in your sandboxes.
Automate common tasks and sandbox readiness to ensure data hygeine and business usability of data while staying compliant to GDPR security measures for data processing.