---
schema_version: "1"
id: 973559af416a8354a0bccfa30cb797ff6976033227ebe557e1da95a0ad2f433c
title: "Privacy Center: Satisfy Customer Requests and Data Privacy Laws"
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/about_privacy_center.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.about_privacy_center.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 6bbb65618db0638edf9d751ea33fabd5c38650c08f0282c777b32f03a0bc453f
description: Honor customer requests on how their sensitive data is handled, and manage components of data privacy laws like the General Data Protection Regulation (GDPR). Use the Privacy Center app to create unique policies, manage requests, and monitor the status and results of scheduled jobs.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Privacy Center: Satisfy Customer Requests and Data Privacy Laws

Honor customer requests on how their sensitive data is handled, and manage components of data privacy laws like the General Data Protection Regulation (GDPR). Use the Privacy Center app to create unique policies, manage requests, and monitor the status and results of scheduled jobs.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>Developer</strong>, <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions with the Privacy Center license.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
      <colgroup>
        <col style="width:50%">
        <col style="width:50%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="vertical-align:top;" id="d14460e64">User Permissions Needed</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d14460e64 ">To create and manage Privacy Center policies:</td>

          <td class="slds-cell-wrap" style="vertical-align:top;" headers="d14460e64 ">Modify All Data AND Manage Privacy Policies</td>

        </tr>
      </tbody>
    </table>

Use Privacy Center on the Salesforce platform, released in Winter ‘24. For the managed package version of Privacy Center that uses Heroku for retention, see [Legacy Privacy Center: Satisfy Customer Requests and Data Privacy Laws](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center.htm&release=264.0.0&type=5 "Manage components of data privacy law such as the General Data Protection Regulation (GDPR), and fulfill customer requests on how their personally identifiable information (PII) is stored, deleted, and transferred.").

The privacy Center was created to meet general privacy law requirements. But it’s also a solution for more specific regulations, like the GDPR. Privacy Center can directly assist with these GDPR principles.

- Data Access: An individual’s right to confirm with a data controller whether the organization is processing their personal data. If it is, the individual has the right to be informed about how and why that information is processed, and what other parties the information has been shared with.
- Restriction of Processing: An individual’s right to request that a controller stop accessing and modifying their personal data.
- Data Portability: An individual’s right to ask a controller to provide their personal data in a structured, commonly used, and machine-readable format. For example, the information can be transmitted to another company in a JSON file.
- Right to Erasure, or the Right to be Forgotten: An individual’s right to request that a data controller delete or remove their personal data. This right applies to situations when the data is no longer needed for the original purpose and when the data subject withdraws consent. Another situation is when the data subject requests to end the processing, and the controller has no overriding legitimate interest in the processing.

![Screenshot of the Privacy Center homepage](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-data_protection_and_privacy-264-0-0-production-enus/27d1bf87-a47b-491a-8339-f53ef6540aec/data_protection_and_privacy/images/privacy_center_homepage.png)

From the App Launcher, enter and select **Privacy Center**. Access every Privacy Center feature from the app home page, including links to resources on privacy laws.

- **[Privacy Center Use Cases at a Glance](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_use_cases.htm&release=264.0.0&type=5)**  
    Get the most out of your Privacy Center implementation with these key use cases.
- **[Grant Access to Privacy Center](https://help.salesforce.com/s/articleView?id=xcloud.privacy_enable_access.htm&release=264.0.0&type=5)**  
    You give users access to Privacy Center through user permissions. Users with the System Administrator profile have access to Salesforce Privacy Center by default. All other profiles require specific permissions. The specific permissions that you define for your users depend on user-access requirements and roles. Depending on your setup, some Privacy Center users require access to Salesforce consent data model objects or custom objects that you use for consent management.
- **[Privacy Center Considerations and Guidelines](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_considerations.htm&release=264.0.0&type=5)**  
    Before using Privacy Center, review these topics.
- **[Mask, Delete, or Retain Data with Data Management Policies](https://help.salesforce.com/s/articleView?id=xcloud.data_management_policies.htm&release=264.0.0&type=5)**  
    Data privacy laws such as the General Data Protection Regulation (GDPR) requires businesses to minimize the amount of personal data stored. For the data that businesses choose to store, they can be required to pseudo-anonymize or anonymize that data as much as possible. To stay compliant with privacy law, businesses can use the Data Management Policies feature in Privacy Center to automate how data is deleted, masked, or retained.
- **[Delete Data with Right to Be Forgotten Policies](https://help.salesforce.com/s/articleView?id=xcloud.about_rtbf_policies.htm&release=264.0.0&type=5)**  
    For data subjects who want their data to be erased or masked, create Right to Be Forgotten (RTBF) policies to run on individual customer records. Create policies that capture the objects you want to delete or make anonymous, then manually run the policy on a specific record at any time.
- **[Delete Data with Privacy Requests](https://help.salesforce.com/s/articleView?id=xcloud.privacy_request_rtbf_create.htm&release=264.0.0&type=5)**  
    Fulfill Right to Be Forgotten (RTBF) requests from your customers using Privacy Requests. Find and delete relevant records in your Salesforce org and in Data 360.
- **[Manage Privacy Request Settings](https://help.salesforce.com/s/articleView?id=xcloud.privacy_request_settings.htm&release=264.0.0&type=5)**  
    Configure the search criteria and scope of Privacy Requests. Control which objects are scanned in your Salesforce org and in Data 360 when users execute searches.
- **[Share Data with Portability Policies](https://help.salesforce.com/s/articleView?id=xcloud.pc_share_data_portability_policies.htm&release=264.0.0&type=5)**  
    Fulfill customer requests to access their data. Create portability policies to compile relevant customer PII in various objects and fields. Or use the Portability API to compile the targeted PII for your customer programmatically. Use the Portability Log to view the history and status of customer requests.
- **[Global Consent Manager](https://help.salesforce.com/s/articleView?id=xcloud.global_consent_about.htm&release=264.0.0&type=5)**  
    Manage and track customer consent from a single system of record across your marketing and data processing activities.
- **[Anonymize Inactive Users](https://help.salesforce.com/s/articleView?id=xcloud.user_object_processing.htm&release=264.0.0&type=5)**  
    With Data Management and Right to Be Forgotten (RTBF) policies, you can anonymize data for users who no longer access your org or Experience Cloud sites. Understand the unique functionality and limitations that apply when processing data on the User object.
- **[Optimize Privacy Policy Performance](https://help.salesforce.com/s/articleView?id=xcloud.privacy_policy_performance.htm&release=264.0.0&type=5)**  
    To optimize the performance of your Data Management and Right to Be Forgotten policies, customize your policy settings.
- **[View and Manage Privacy Jobs](https://help.salesforce.com/s/articleView?id=xcloud.view_policy_job_sessions.htm&release=264.0.0&type=5)**  
    See details about the jobs for your Data Management and Right to Be Forgotten policies. You can also cancel, reschedule, or immediately run privacy jobs.
- **[Export Policies Between Sandbox and Production](https://help.salesforce.com/s/articleView?id=xcloud.export_policies_between_sandbox_and_production.htm&release=264.0.0&type=5)**  
    You can export privacy policies directly between your sandbox and production org. Use this feature to develop, test, and troubleshoot privacy policies while quickly converting them between your Salesforce environments.
- **[Access Data in a Privacy Center Retention Store](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_salesforce_connect.htm&release=264.0.0&type=5)**  
    To view records in a Privacy Center retention store, use the Salesforce Connect adapter for Privacy Center.
- **[Use Privacy Hold to Preserve Records from Processing](https://help.salesforce.com/s/articleView?id=xcloud.privacy_hold.htm&release=264.0.0&type=5)**  
    For legal or business purposes, designate a record to be preserved from masking or deletion by Data Management policies in Privacy Center.
- **[Agentforce in Privacy Center](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_agent.htm&release=264.0.0&type=5)**  
    Discover and resolve potential compliance and risk issues in your Salesforce org with an AI-powered experience. Agentforce in Privacy Center monitors your org against a configurable compliance framework, surfaces issues before violations occur, and recommends remediation actions for your review and approval.
- **[Privacy Center Implementation Guide](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_implementation_guide.htm&release=264.0.0&type=5)**  
    The implementation guide provides supplemental information on setting up and using Privacy Center.

#### See Also

- [Data Deletion: Delete Personal Data](https://help.salesforce.com/s/articleView?id=xcloud.data_deletion.htm&release=264.0.0&type=5 "Get guidance on deleting personal data as you comply with various data protection and privacy regulations. We give you examples of common customer requests and things to consider. That way, you can determine how to best comply with the regulations that apply to your company.")
- [Consent Management: Track Customer Consent and Honor Opt-Out Requests](https://help.salesforce.com/s/articleView?id=xcloud.consent_management.htm&release=264.0.0&type=5 "Track your customers’ approval for how your company interacts with them. Comply with customer requests to opt-out of sharing their personal information with third parties. To help you assess your compliance with data protection and privacy regulations, we give you examples of common customer requests. And we provide details to help you determine the best way to comply with the regulations that apply to your company.")
- [Restriction of Processing: Restrict How to Process Personal Data](https://help.salesforce.com/s/articleView?id=xcloud.restriction_of_processing.htm&release=264.0.0&type=5 "Prevent the processing of your customers’ data when situations require you to do so. We give guidance on how to restrict forms of data processing. That way, you can work toward complying with the laws that are important to your company.")
- [Data Access and Portability: Give Customers Their Data when They Want It](https://help.salesforce.com/s/articleView?id=xcloud.data_portability.htm&release=264.0.0&type=5 "Export customer-related data when customers request it, so that you can work toward complying with various data protection and privacy regulations. We give you examples of common customer requests and things to consider when you evaluate your compliance with the regulations that apply to you.")
- [Legacy Privacy Center: Satisfy Customer Requests and Data Privacy Laws](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center.htm&release=264.0.0&type=5 "Manage components of data privacy law such as the General Data Protection Regulation (GDPR), and fulfill customer requests on how their personally identifiable information (PII) is stored, deleted, and transferred.")
- [Use Preference Manager to Gather Communication Preferences](https://help.salesforce.com/s/articleView?id=xcloud.preference_center_about.htm&release=264.0.0&type=5 "As privacy law continues to define individual data rights and data use regulations, it’s important to establish consent with your customers. Use the Preference Manager app within Privacy Center to meet regulatory requirements and build trust with your customers. Securely capture their preferences for how, why, and when you can contact them.")
- [Policy Center: Control Data Security and Management Policies](https://help.salesforce.com/s/articleView?id=xcloud.policy_center_intro.htm&release=264.0.0&type=5 "Policy Center is your home for creating and managing different policy types across the Salesforce platform.")
- [Data Export and Portability Across Salesforce](https://help.salesforce.com/s/articleView?id=xcloud.data_export_portability_across_salesforce.htm&release=264.0.0&type=5 "Export customer-related data, so that you can work toward compliance with various data protection and privacy regulations.")