GDPR and the Right to be Forgotten

Whether you are required to be compliant with the European Union law on data protection and privacy (General Data Protection Regulation or GDPR), other privacy protection laws such as The California Online Privacy Protection Act (CalOPPA), you would like your company to get ahead of the curve with respect to privacy acts as a best practice, or have a client that does, Salesforce has implemented an Individual object to help you keep track of an individual’s data privacy preferences.

Customizing and using the Individual object according to your business will help you on your journey to honor your customer’s wishes regarding how their data is stored and used, and when it needs to be deleted. The Right to be Forgotten applies when a customer no longer wishes for you to retain data about them, you no longer have a legal basis for processing, or when it’s no longer necessary to keep their data.

One person (Individual) may have multiple records within your Salesforce instance that contain personal data such as Leads, Contacts, Person Accounts, or User. An efficient method is needed to find and delete the Individual and/or all of its related records.

Tip: Set up your org for success. Ensure that all of the person’s Lead, Contact, Person Account, or User records are related to the Individual record by automatically relating them with Lookup Helper.

There are a number of ways to delete data from Salesforce, some of them have their limitations and some are more difficult to use than others. Using Storage Helper is an easy, safe way to mass delete records tied to an individual.

Let’s walk through deleting Individual records and/or their associated Lead and Contact records.

Before you get started, it is a good idea to determine the criteria that Storage Helper should use for record deletion. In this use case, we will be using the “Forget this Individual” field flagged true as the only criteria. Checking this flag could be accomplished in a number of ways, including using Rollup Helper to rollup the checkbox from Leads, Contacts, or other child records that meet the requirements you define.

Install Storage Helper Free Edition

Deleting Individual and related records with Storage Helper

Part 1: Create a New Storage Recycle Job

  1. OBJECT: Individual
  2. HARD DELETE: check to bypass sending records to the Recycle Bin.*
  3. CHILD OBJECTS: select related objects that contain records to also delete (Lead shown in example)
  4. FILTER. Field: Forget this Individual. Logic: equals. Condition: True.
  5. Save.

* Hard Delete: Leaving the flag unchecked may be the safer option in case you have incorrect criteria and aren't using Storage Helper backup functionality. Note for compliance, after verification that the correct records were deleted, you will need to empty the Recycle Bin to completely remove the data from your org. The Recycle Bin’s capacity is limited so it's possible to delete more records than your Recycle Bin can hold. Using one of Storage Helper’s backup options is HIGHLY recommended, as the backup files can be deleted then removed from the recycle bin after confirmation that the correct records were deleted.

Part 2: Safety net

  1. “Preview Records” to verify filter criteria will produce the desired results.
  2. Select Backup options.

    Ensure that you are compliant with requirements regarding backing up personal data. Storage Helper will provide a .csv file of the backed up data that will either contain data from all of the fields on the records, or only select fields depending on the option you choose. Contact your company’s legal advisers for any questions regarding backing up personal data. If you find that you are able to retain data that is not personally identifiable and would like to do so, you can use the option to backup select fields. Alternatively, you could back up all of the fields and then delete the data you do not wish to retain from the .csv file. NOTE: If you wish to completely remove the data after verifying the correct records were deleted, you will need to delete it from any .csv files that you have downloaded, delete the .csv from Salesforce, and remove the file from the recycle bin.

    1. Select Backup Select Fields, and optionally select to enable Storage Helper Archive Search.

      Storage Helper Archive Search enables you to reinstate specific records to your Salesforce instance by searching for the record from the .csv file and loading it back into your org with the click of a button.

    2. Select all fields you would like to backup by moving them to the box on the right and click save.

Part 3: Execute

Once the deletion criteria is verified and the appropriate backups are in place, activate the job: sidebar Detail tab>Edit>Active>Save.

Running Storage Recycle Jobs:

  • The “Run” button will manually start the deletion process.
  • Optionally, to automate a regular deletion process, select a run mode to execute the Active jobs on either a defined schedule or after Salesforce Data Backups.

Deleting related Child Records Only and keeping Individual

Create “New Storage Recycle Job.”

  1. OBJECT: such as Lead, Contact.
  2. HARD DELETE: check to bypass sending records to the Recycle Bin.* (see note above)
  3. FILTER. Field: Individual>Forget this Individual. Logic: equals. Condition: True.
  4. Save.
  5. Follow Part 2: Safety net and Part 3: Execute above.

Walkthrough

GDPR-individual-delete_SH_step-1 GDPR-individual-delete_SH_step-2 GDPR-individual-delete_SH_step-3 GDPR-individual-delete_SH_step-3ish GDPR-individual-delete_SH_step-4

 

Salesforce Individual GDPR compliance with Free Salesforce rollup field data app Rollup Helper on AppExchange: Must-have admin app, productivity app for Salesforce admins. Helper Suite by trusted Salesforce partner Passage Technology.
Salesforce Individual GDPR compliance with Free Salesforce search app Lookup Helper on AppExchange: Find related records, dupe data. Helper Suite by trusted Salesforce partner Passage Technology.

Need assistance? Schedule a free work session.