Response To A Request For Personal Information
If you have classified the sensitivity of your data and are sure that the classification is correct, the user can respond to requests using the options on the Privacy.
From a GDPR perspective, contacts can request several types of actions regarding their personal data.
Request types
The company using OneCore is responsible for ensuring that personal and sensitive data is correctly located and classified in the system.
The following table lists the types of requests that you can respond to
Request Type | Description and Suggested Answer |
Entity Data Export Requests (Porting) | The data subject may submit a data portability request, which means that you must export the data subject's personal data from your systems and provide it in a structured, commonly used format. To respond to these requests, you can use RapidStart to export personal information to an Excel file or configuration package Data Protection Tool. You can use Excel to edit personal data and save it to a commonly used, machine-readable format, such as CSV or XML. For RapidStart configuration packages, you can configure master data tables and their related tables that contain personal data. Note: When you export data, you specify a minimum sensitivity level. The export will include the minimum and all sensitivity levels above it. For example, if you choose to export data that is classified as personal, the export will also include data that is classified as sensitive. When exporting data related to the data subject, it looks for Data Protection Tool direct relationships between the data subject and the data relating to the data subject. Indirect relationships between data related to the data subject and other data are not automatically exported Data protection tool. For example, the contacts table has directly related contact profile answer data, and the contact profile answer table is further related to the profile question data. If you want to export profile questions as well, you need to manually add this table as a row with the appropriate filters in the configuration package it creates Data Protection Tool. |
Requests for deletion of personal data | The data subject may request the deletion of their personal data. There are several ways to delete personal information using customization options, but the decision and implementation is your responsibility. In some cases, you may choose to edit your data in a direct way, such as delete a contact, and then run the Delete Log Entries batch job to delete the contact's interactions. Note: If you specified a date in the Allow Document to Delete Before Date On the site Sales & Receivables Setup or Purchase & Payables Setup, you may need to change the date to delete posted sales and purchase documents that you have printed and that have a posting date on or before that date. |
Requests to modify personal data | The Subject may request the rectification of inaccurate personal data. There are several ways to do this. In some cases, you can export lists to Excel and edit multiple records in bulk, and then import the updated data. You can also manually edit fields that contain personal information, such as editing customer information on the Customer card. However, transaction records, such as general ledger entries, customer ledger entries, and taxes, are essential to the integrity of an organization's resource planning system. If you store personal information in business transaction records, consider using customization options to modify that personal information. |