DocumentationAEM 6.4Administering Guide

AEM Commerce - GDPR Readiness aem-commerce-gdpr-readiness

Last update: Wed May 03 2023 00:00:00 GMT+0000 (Coordinated Universal Time)

CREATED FOR:

  • Admin
CAUTION
AEM 6.4 has reached the end of extended support and this documentation is no longer updated. For further details, see our technical support periods. Find the supported versions here.
IMPORTANT
GDPR is used as an example in the sections below, but the details covered are applicable to all data protection and privacy regulations; such as GDPR, CCPA etc.

The European Union’s General Data Protection Regulation on data privacy rights takes effect as of May 2018. For further information see the GDPR page at the Adobe Privacy Center.

NOTE
See AEM GDPR Readiness for further details.

screen_shot_2018-03-22at111606

In our out-of-the-box Commerce integrations, AEM is the experience layer, consuming services and sending data back to the customer commerce platform that runs in a headless mode.

For some commerce platforms, we store profile information ( /home/users) and commerce tokens (to login in the commerce platform) in AEM. For these use cases, please read Handling GDPR Requests for the AEM Platform.

screen_shot_2018-03-22at111621

Handling GDPR Requests for AEM Commerce handling-gdpr-requests-for-aem-commerce

For the Salesforces Commerce Cloud integration, AEM Commerce does not store any GDPR relevant information. You should forward the request to the Salesforce Cloud.

For the hybris and IBM WebSphere integrations, there is some data in AEM. You should use the AEM Platform GDPR instructions and consider these questions:

  1. Where is my data stored/used? Cached user profile information such as name, commerce user identifier, token, password, address data, and so on is shown from AEM.
  2. With whom do I share the covered GDPR data? Any update of GDPR relevant data in AEM Commerce does not get stored (except relevant profile information, as mentionned above) but is proxied back to the commerce platform.
  3. How to delete my user data? Delete the user profile in AEM and invoke the user deletion on the commerce platform.
NOTE
Have a look at the hybris wiki or the Websphere Commerce documentation if required.
recommendation-more-help
5ce3024a-cbea-458b-8b2f-f9b8dda516e8