The General Data Protection Regulation (GDPR) is the European Union’s new privacy law that harmonizes and modernizes data protection requirements. While there are many new or enhanced requirements, the core underlying principles remain the same. The new rules have a broad definition of personal data and they have a wide reach, affecting any company that markets products and services to individuals in the EU. As your trusted data processor, we’re committed to compliance and to helping you on your GDPR compliance journey.
Building on the certified security controls underlying Adobe Experience Cloud solutions, Adobe Analytics is working to incorporate additional functionality to better support organizations as they prepare for GDPR.
In advance of the GDPR effective date, Adobe recommends customers evaluate the following areas.
GDPR provides individuals (Data Subjects) with enhanced rights to information that companies maintain about them. As a data controller, you should be prepared to handle these types of requests (e.g., data access and data deletion).
Organizations may need to obtain consent for certain types of analytics activities. Adobe Analytics customers are responsible for how and what data is ingested into Adobe Analytics. With GDPR in mind, you should understand which data sources and associated data types fit best for your required use cases and consider whether consent may be required for each case.
To assess the need for consent and to develop an approach, consider the following:
To address GDPR’s data minimization principle (i.e., limiting data collection to what is necessary for a particular purpose), take this opportunity to review your data collection practices.
Evaluate and balance the cost of keeping, securing, and responding to individual rights requests against your business needs by taking the following steps:
Data governance helps set the framework to define strategies, processes, policies, and technologies to manage data. We recommend being proactive when it comes to data governance. Among the many benefits, this approach will help facilitate Data Subjects’ access or delete requests, and your consumers will have a positive, differentiated experience with your brand.
Adobe recommends that you review your processes for managing your data by taking the following steps: