Right to rectification

Abstract

Guide to updating a Sitecore data subject's contact, user, customer and forms data.

Warning

This Privacy Guide provides technical guidance on how your developers can choose to configure your Sitecore product implementation to support you on your data privacy compliance journey. This guide does not provide exhaustive guidance, and should not be construed or used as legal advice about the content, interpretation, or application of any law or regulation. You, the customer, will always be in the best position to assess your own risks, and must seek your own legal counsel to understand the applicability of any law or regulation to your business, including how you process personal data. Your resulting implementation is based entirely on your own configuration choices.

The right to rectification concerns the data subject’s right to have their data rectified if it is inaccurate or incomplete. This topic describes how to update contact, user, and customer data.

Some data is automatically synchronized between entities. For example, if a customer’s first or last name is updated from the BizFX role, that data is copied to the associated contact entity. Refer to the table of data synchronization between data subject entities for more information.

Within your Sitecore implementation, you can:

  • Use the xConnect API to update a contact’s personal data.

The organization is responsible for:

  • Implementing a process or an interface that allows data subjects to access and update their data.

Tip

You can create a custom submit action for Sitecore Forms that updates a contact’s personal details.

Within your Sitecore implementation, you can:

The organization is responsible for:

  • Implementing a process or an interface that allow users to access and update their data.

Within your Sitecore implementation, you can:

The organization is responsible for:

  • Implementing a process or an interface that allows customers to access and update their data.

By default, form submission data is stored in the Forms database. If a form submission is linked to an identifier such as a contact identifier or an e-mail address, you can use SQL to access and update a specific data subject’s personal data.

Important

If you create a custom submit action that stores personal data in a third party system such as a CRM, you are responsible for ensuring that data subjects can access their data in that system.