Located on the database and suppression lists tabs, Acoustic Campaign makes it easy for users to access the GDPR menu for Right of Access and Right to Erasure through their organization.
If using a flexible database, ensure that GDPR LookUp keys are selected for that database. Restricted databases will use email as the GDPR LookUp key.
Before you begin, within your database, you can select up to 5 fields from the GDPR Lookup Fields screen. These fields will be used for GDPR LookUps. To configure this setup, click the name of the database you will use. Go to Settings on the Database details screen. Click the GDPR LookUp Fields tab, then select up to 5 fields that you want to use as GDPR Lookup Fields. Click Save.
Next, go back to the Databases > View Data screen, and place a check mark next to the name of the database that you are working in. For Suppression lists, only the GDPR Erasure option is available for selection.
You will then hover over the GDPR tab and select either GDPR Access or GDPR Erasure. Once a selection has been made, you will be redirected to the relevant GDPR request page to submit the GDPR request. Be mindful that the GDPR Erasure and GDPR Access menu will not work if the following are selected:
- Multiple databases or suppression lists
- Fast Campaign Integration (FCI) database
Additionally, if a standard user attempts to perform a GDPR request on a shared database, the GDPR request will not be allowed.
On the GDPR request page, you must select a CSV file and click Submit.
Note: As expected in GDPR APIs, the CSV file has only identifierType, identifierValue pairs in separate lines. See the attached example.
Upon successful submission, you will be redirected to the GDPR Jobs page, which is also accessible through the Resources page in the user interface. Here you will see a listing of all requests submitted by a standard user. If the user is an organization administrator, all the jobs for the organization will be shown. Additionally, you will be able to download the response for successful jobs for the databases owned by you.
If the response is not downloaded within 3 days, the job is archived and will not be available on the GDPR Jobs page.