Can some one let me know how Salesforce safeguard all the Personally identifiable information (PII) or "data subject” under the GDPR rules. What are the required steps to be implement to achieve this.
1
-
1There's a lot on this subject. You might want to start here.– sfdcfox ♦Commented Jun 28, 2018 at 5:16
Add a comment
|
1 Answer
Salesforce has different security mechanisms that safeguard data privacy that includes using Shield , Platform Encryption (Security for Data at REST), Event monitoring to track which APIs are used , Audit Trails and Field History Tracking .
All the above helps to keep the Data safe however specifically to be GDPR complaint the primary rule will be to store the consent of the user from various sources and for various channel . This trailhead module talks in detail about the GDPR rules .
Salesforce offers a new object called Individual Object .This allows to store the Individual preferences and relate it back to Leads , Contacts and Person Accounts and any action or process in salesforce can take place based on the fields on this object .
Here is an excellent article that shows an excellent strategy to be a GDPR complaint and custom object model along with salesforce objects to store consent and other data and how to leverage them in business process .
answered Jun 28, 2018 at 5:40
