Privacy, consent and data subject requests
Which out-of-the-box privacy tools B2C Commerce, Data 360, the service org, Marketing Cloud Engagement and Marketing Cloud Personalization provide for deletion, restriction, portability, tracking and consent, and where a request still needs custom work in each product.
Given a set of customer requirements, articulate the privacy management features across multiple products, when to consider a custom solution vs. using out-of-the-box (OOTB) features.
~7 min read · 17 practice questions
What the exam expects
- Map a shopper's deletion, restriction, portability or do-not-sell request to the tool each product provides, and name the steps that stay manual or custom.
- Distinguish B2C Commerce tracking controls: the Privacy site default, the per-session value set in custom code and the clickstream DNT option.
- Choose the right Data 360 Consent API action and identifiers, and predict what a deletion removes.
- Store service-org consent at the right level of the Salesforce Consent Data Model, and describe Engagement Contact Delete and Personalization deletion scope.
Key terms: data privacy record (a record based on the Individual object that holds global privacy preferences); Consent API (the REST resource that reads and writes consent, including Data 360 actions); Contact Delete (the Contact Builder process that removes a contact from Engagement); DNT (do not track, the shopper's tracking opt-out).
Key facts
- Detail
- Leaves orders, gift certificates and coupon emails
- Detail
- No deletion while open orders exist
- Detail
- Up to nine days
- Detail
- Sets only the default for new sessions
- Detail
- After 30, 60 and 90 days
- Detail
- ModifyAllData or ConsentApiUpdate
- Detail
- 2 days by default, adjustable
- Detail
- Not on extensions over 100 million records
- Detail
- Up to 30,000 users per request
Sources for this section (9)
- Data Deletionhelp.salesforce.com (opens in a new tab)
- Restriction of Processinghelp.salesforce.com (opens in a new tab)
- Customer Data Snapshotshelp.salesforce.com (opens in a new tab)
- Set Privacy Preferenceshelp.salesforce.com (opens in a new tab)
- Data Deletion Requesthelp.salesforce.com (opens in a new tab)
- Consent API with Data 360developer.salesforce.com (opens in a new tab)
- Contact Deletionhelp.salesforce.com (opens in a new tab)
- Contact Delete Best Practiceshelp.salesforce.com (opens in a new tab)
- User Look-Up and Deletion APIdeveloper.salesforce.com (opens in a new tab)
- When should a merchandiser delete customers through Import & Export rather than the Customers page?
- Why must you PATCH consent for a new Data 360 profile before your first Consent API GET?
- Which user permissions allow Consent API calls that use the Data 360 parameters?
- How many users can one Personalization deletion request include?
The questions are free to read. Answers with their sources and self-grading are included with the pack.
Keep reading with the B2C Solution Architect pack
- Core concepts
- Exam traps
- Worked scenario
The pack includes:
- All 20 lessons of the B2C Solution Architect guide, with reading progress
- Interactive decision walks and step-by-step sequence steppers
- Practice exams purchase adds inline bank questions and topic practice (17 questions for this lesson)
- An official source cited for every claim
- An AI tutor that answers from the guide
- Choose guide-only, practice-only, or save $4 with both