This document describes what you need to do in Adobe Analytics to support your data subjects' GDPR access and delete rights.
On May 25, 2018, the European Union's General Data Protection Regulation (GDPR) goes into effect. For more information about Adobe's response and what this means for you as an Adobe customer, see GDPR and Your Business.
When Adobe is providing software and services to an enterprise, Adobe is acting as a data processor for any personal data it receives and stores on behalf of our customers, as part of providing the services. As a data processor, Adobe processes personal data in accordance with your company’s permission and instructions (for example, as set out in your agreement with Adobe).
As the data controller, you will determine the personal data that Adobe processes and stores on your behalf. If you use Adobe Experience Cloud solutions, Adobe might host personal data for you depending on the solutions you use and the information you choose to send to your Adobe Experience Cloud account. For a list of examples, see Adobe Experience Cloud privacy.
The Adobe Cloud Platform (ACP) provides an integrated solution that connects your brand's data governance infrastructure with the Adobe tools it uses to create and manage consumer experiences. The data governance features of the Adobe Cloud Platform enable a direct linkage of data governance policy to data usage.
Familiarize yourself with how Adobe Analytics handles GDPR which discusses steps for GDPR readiness and how to integrate with the Adobe Experience Cloud GDPR API.
Adobe realizes that you are most familiar with the custom data in your report suites and we are giving you the opportunity to define your data governance settings and preferences.
To that end, Adobe Analytics provides a Data Governance user interface that lets you, as the data controller, set privacy labels on your Analytics reports suites and all the dimensions and metrics in those report suites. You can identify the columns in your data set that contain directly identifiable data or indirectly identifiable data so that you can submit your access and delete requests to address that data. For each request, the labels defined in the Analytics Data Governance user interface will be honored for the specific identifier that corresponds to that request.
See Label Report Suite Data for more information on how to set the labels.