Consent Management for EDA

Learn how to manage consent and data privacy preferences in EDA.

Consent Management for Your Product
Learn about consent management for Education Data Architecture. Various data protection and privacy laws, such as the GDPR, impose requirements around obtaining, maintaining, and withdrawing consent and otherwise honoring certain preferences of individuals in the processing of their personal information. We provide examples, considerations, and tips to help you determine ways to comply with constituent preferences around contact with, or from, your organizations.

Consent Management for Your Product

Learn about consent management for Education Data Architecture. Various data protection and privacy laws, such as the GDPR, impose requirements around obtaining, maintaining, and withdrawing consent and otherwise honoring certain preferences of individuals in the processing of their personal information. We provide examples, considerations, and tips to help you determine ways to comply with constituent preferences around contact with, or from, your organizations.

When managing consent and certain other data privacy preferences, you may consider using Salesforce’s new Individual object. The Individual object is neither pre-enabled in your system nor pre-configured to work with Salesforce.org applications, but you can enable and implement it using Salesforce customization tools. Whether and how best to utilize the Individual object for your organization is up to you. Salesforce.org will continue to evaluate the Individual object and how we may support it in future releases of our applications.

We offer the following examples of common requests and considerations to help you plan how best to honor constituent consent-related requests. These are only suggestions for your review, and not guaranteed steps for ensuring compliance with any legal rule.

Keep in mind that addressing constituent requests, including those provided for under the GDPR, can be challenging. A one-size-fits-all strategy may not always work, and you may need to adjust your approach when balancing organizational needs and legal obligations. For example, if exporting personal data to satisfy a GDPR data portability request may violate someone else’s rights, you might consider narrowing the fields in scope rather than exporting all data. If deleting personal data to satisfy a GDPR erasure request may conflict with other requirements around record preservation, you might consider anonymizing certain fields rather than wholesale deletion.

No results are displayed if the predictive metrics fields are not populated.
If the Don't Profile field is checked, then a yellow warning icon and a Don't Profile badge are displayed on the Predictive Metrics header when predictive metrics are loaded. The Don't Profile field is located on the individual record that the Contact is associated with and it ensures that the user's data is not used for future modeling.

As always, there are pros and cons to each approach, including legal and business impacts and risks, and you are responsible for your own compliance obligations in your use of the Salesforce Services and Salesforce.org applications. You should work with your advisors, including legal counsel, to determine whether you are covered under a legal requirement, and come up with a compliance plan that’s best for your organization.

Salesforce resources:

Important Remember to review both Salesforce Platform documentation AND Salesforce.org product-specific documentation. In addition to the information in this table, review:

Common Constituent Request	Actions to Consider	Things to Consider
A student doesn't want to receive informal or non-business related calls, emails, or postal mail from your organization.	Manage Contacts Manage Leads Delete Records	You may consider deleting information in these Contact or Lead fields: Phone Home Phone Other Phone Mobile Email Mailing Address Other Address EDA also includes these custom email and phone fields and objects: Alternate Email University Email Work Email Work Phone Address Object For Contacts and Leads, consider these options: Email Opt Out Do Not Call Do Not Contact
Some of your students don't want to hear from your organization, unless they specifically opt in.	Manage Contacts Manage Leads Delete Records	For Contacts and Leads, consider these options: Email Opt Out Do Not Call Do Not Contact Consider deleting phone numbers, email addresses, and mailing addresses, unless your constituents give you consent to use them. Refrain from sending marketing materials.

Common Constituent Request

Actions to Consider

Things to Consider

A student doesn't want to receive informal or non-business related calls, emails, or postal mail from your organization.

Manage Contacts

Manage Leads

Delete Records

You may consider deleting information in these Contact or Lead fields:

Phone
Home Phone
Other Phone
Mobile
Email
Mailing Address
Other Address

EDA also includes these custom email and phone fields and objects:

Alternate Email
University Email
Work Email
Work Phone
Address Object

For Contacts and Leads, consider these options:

Email Opt Out
Do Not Call
Do Not Contact

Some of your students don't want to hear from your organization, unless they specifically opt in.

Manage Contacts

Manage Leads

Delete Records

For Contacts and Leads, consider these options:

Email Opt Out
Do Not Call
Do Not Contact

Consider deleting phone numbers, email addresses, and mailing addresses, unless your constituents give you consent to use them. Refrain from sending marketing materials.