You are here:
Customer Data Subject Rights in Insights
A customer’s data subject rights relate to the storage and use of their personal data. When an insight uses the individual data model object (DMO), Data 360 automatically applies your customers’ data subject rights requests to the insight output.
Submit all data subject rights requests using the Salesforce Consent API. You can request restriction of processing for common General Data Protection Regulation (GDPR) scenarios, such as data deletion. For more information, see Data Subject Rights.
To make sure that data subject rights are applied to your insights, map your personal data to the individual DMO. Insights that use DMOs other than the individual DMO don’t have any automatic data subject rights checks. See Impact of Data Modeling on Data Subject Rights Requests.
Based on the data sent through the Consent API, each insight type handles data subject rights requests as described in this table.
| Insight Type | Data Subject Rights Handling |
|---|---|
| Calculated insight | The calculated insight job automatically removes individuals with a data subject rights request from the output each time it runs. |
| Streaming insight | Because a streaming insight processes data continuously and doesn’t recompute past windows, a data subject rights request is applied only to future window processing. Individuals with a data subject rights request aren’t removed from window data that’s already aggregated. |
| Real-time insight | Data subject rights requests aren’t referenced during per-event processing. A companion batch calculated insight performs the check, and the results are applied on the next scheduled real-time data graph refresh. |
Calculated Insights
When a calculated insight definition uses the individual DMO, the calculated insight job automatically removes individuals with a data subject rights request from the calculated insight object output each time it runs.
Streaming Insights
When a streaming insight definition uses the individual DMO, the streaming insight applies data subject rights requests to future window processing only. Because a streaming insight processes data continuously and doesn’t recompute past windows, an individual with a data subject rights request isn’t removed from window data that’s already aggregated.
Real-Time Insights
Real-time insights don’t reference data subject rights requests during per-event processing. Instead, each real-time insight has a companion batch calculated insight that performs the data subject rights check. On the next scheduled real-time data graph refresh, the real-time insight metrics and dimensions are updated to reflect the check.
Because the check is applied on a scheduled refresh rather than during event processing, an individual with a recent data subject rights request can still appear in real-time insight results until the next real-time data graph refresh.
