Customer Attributes support for California Consumer Privacy Act
This page describes Customer Attributes’ support for the California Consumer Privacy Act (CCPA).
The CCPA is California’s new privacy law, which is effective January 1, 2020. CCPA provides California residents new rights regarding their personal information and imposes data protection responsibilities on certain entities who conduct business in California. CCPA provides consumers with the right to access and delete their personal information and the right to opt out of certain activities that qualify as “selling” personal information to a third party.
As a business, you determine the personal data that Adobe Experience Cloud processes and stores on your behalf.
As your service provider, Adobe Experience Cloud provides support for your business to fulfill its obligations under CCPA that are applicable to the use of Experience Cloud products and services. This support includes managing requests to access and delete personal information.
This document describes how Customer Attributes supports your data subjects’ CCPA data access and deletion rights using the Adobe Experience Platform Privacy Service API and Privacy Service UI.
For more information about the Adobe Privacy services for CCPA, see the Adobe Privacy Center.
Required setup to send requests for Customer Attributes
To make requests to access and delete data for Customer Attributes, you must:
-
Identify the following:
- Organization ID
- Alias ID of CRS Data Source you want to act on
- CRM ID of the profile you want to act on
Your organization ID is a 24-character alphanumeric string appended with @AdobeOrg. You need the organization’s ID to submit requests to the Privacy API. Contact Adobe Customer Care at
gdprsupport@adobe.com
if you cannot locate the ID. -
In Privacy Service, you can submit Access and Delete requests to Customer Attributes, and check the status of existing requests.
Required field values in Customer Attributes JSON Requests
“company context”:
- “namespace”: imsOrgID
- “value”: <your organization ID value>
“users”:
-
“key”: <usually the name of the customer>
-
“action”: either access or delete
-
“user IDs”:
- “namespace”: <Alias ID of CRS Data Source>
- “type”: integrationCode
- “value”: <CRM ID>
-
“include”: CRS (which is the Adobe product that applies to the request)
-
“regulation”: ccpa (which is the privacy regulation that applies to the request)
Example of JSON request
{
"companyContexts": [
{
"namespace": "imsOrgID",
"value": "<IMS_ORG_ID>"
}
],
"users": [
{
"key": "<KEY>",
"action": [
"<access/delete>"
],
"userIDs": [
{
"namespace": "<Alias ID of CRS Data Source>",
"type": "integrationCode",
"value": "<CRM ID>"
}
]
}
],
"regulation": "<gdpr/ccpa/pdpa>",
"include": [
"CRS"
]
}
Data fields returned for access requests
attributes:
{
"value": "<*value*>",
"key": "<*key*>",
"displayName": "<*displayName*>"
}