AEM Commerce - GDPR Readiness aem-commerce-gdpr-readiness
The European Union’s General Data Protection Regulation on data privacy rights takes effect as of May 2018. See the GDPR page at the Adobe Privacy Center.
With Adobe’s out-of-the-box Commerce integrations, AEM is the experience layer, consuming services and sending data back to the customer commerce platform that runs in a headless mode.
For some commerce platforms, Adobe stores profile information ( /home/users) and commerce tokens (to log on in the commerce platform) in AEM. For these use cases, read Handling GDPR Requests for the AEM Platform.
Handling GDPR Requests for AEM Commerce handling-gdpr-requests-for-aem-commerce
For the Salesforce Commerce Cloud integration, AEM Commerce does not store any GDPR relevant information. Forward the request to the Salesforce Cloud.
For the hybris and HCL WebSphere® Commerce integrations, there is some data in AEM. Use the AEM Platform GDPR instructions and consider these questions:
- Where is my data stored/used? Cached user profile information such as name, commerce user identifier, token, password, and address data as shown from AEM.
- With whom do I share the covered GDPR data? Any update of GDPR relevant data in AEM Commerce does not get stored (except relevant profile information, as mentioned above) but is proxied back to the commerce platform.
- How to delete my user data? Delete the user profile in AEM and invoke the user deletion on the commerce platform.