Right to data portability

Abstract

Guide to exporting a data subject's personal contact, user, customer and forms data.

Warning

This Privacy Guide provides technical guidance on how your developers can choose to configure your Sitecore product implementation to support you on your data privacy compliance journey. This guide does not provide exhaustive guidance, and should not be construed or used as legal advice about the content, interpretation, or application of any law or regulation. You, the customer, will always be in the best position to assess your own risks, and must seek your own legal counsel to understand the applicability of any law or regulation to your business, including how you process personal data. Your resulting implementation is based entirely on your own configuration choices.

The right to data portability concerns the data subject’s right obtain and reuse their personal data. This topic describes how the Sitecore product facilitates the ability to export the data subject’s data to a machine-readable format.

Exporting contact data

Within your Sitecore implementation, you can:

  • Use the xConnect API to export a contact’s data and interaction history to JSON.

The organization is responsible for:

  • Implementing an interface or a process that allows data subjects to export their contact data.

Exporting user data

Within your Sitecore implementation, you can:

The organization is responsible for:

  • Converting profile data to JSON or another machine-readable format.

  • Implementing an interface or a process that allows data subjects to export their user data.

Exporting customer data

Within your Sitecore implementation, you can:

The organization is responsible for the following:

  • Converting customer data to JSON or another machine-readable format.

  • Implementing an interface or a process that allows data subjects to export their customer data.

Exporting form data

By default, form submission data is stored in the Forms database. If a form submission is linked to an identifier such as a contact identifier or an e-mail address, you can use SQL to access and export a specific data subject’s personal data.

Important

If you create a custom submit action that stores personal data in a third party system such as a CRM, you are responsible for ensuring that data subjects can access their data in that system.