--- schema_version: "1" id: f0a398b44d55d4fd328f24f6d1d21fb1dc0b447f59e6f467a690b61d33e9e909 title: "Legacy Privacy Center: Satisfy Customer Requests and Data Privacy Laws" collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/privacy_center.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.privacy_center.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: a0678a5b8f0a4c0f5dedca23e55496de9cb3b71933589bf50b8fb6c98b26408d description: Manage components of data privacy law such as the General Data Protection Regulation (GDPR), and fulfill customer requests on how their personally identifiable information (PII) is stored, deleted, and transferred. products: - Security - Cross Cloud release: "264" --- # Legacy Privacy Center: Satisfy Customer Requests and Data Privacy Laws Manage components of data privacy law such as the General Data Protection Regulation (GDPR), and fulfill customer requests on how their personally identifiable information (PII) is stored, deleted, and transferred. ### Required Editions
User Permissions Needed
To create and use Retention policies and Right to Be Forgotten policies: ModifyAllData and PrivacyCenter
To use the Data Subject Access Requests feature: ModifyAllData, ManageDsarPolicy, and ExecuteDsarPolicy
Requires the Salesforce Privacy Center add-on subscription.
Legacy Privacy Center is a managed package that uses Heroku for retention. Starting in Winter ‘24 a version of Privacy Center on the Salesforce platform is available. For more information, see [Privacy Center: Satisfy Customer Requests and Data Privacy Laws](https://help.salesforce.com/s/articleView?id=xcloud.about_privacy_center.htm&release=264.0.0&type=5 "Honor customer requests on how their sensitive data is handled, and manage components of data privacy laws like the General Data Protection Regulation (GDPR). Use the Privacy Center app to create unique policies, manage requests, and monitor the status and results of scheduled jobs."). Data protection and data management are key contributors to improved customer trust. In a data-driven world, customers are increasingly privacy conscious. They want to buy from companies that keep their personal information safe and secure, and they’re loyal to businesses that prioritize privacy management. Proper data management helps ensure that businesses comply with legal regulations and avoid penalties. There’s a lot to consider when it comes to data management, but Privacy Center is up to the challenge. As a secure data management program, Privacy Center helps you maintain customer privacy through every stage of the data lifecycle. Create policies that satisfy your customer’s right to be forgotten with the Right to Be Forgotten Policies feature. Or retain and de-identify a customer’s personally identifiable information (PII) using the Retention Policies feature. You can even create Portability Policies that compile and deliver PII to customers in response to data subject access requests. With Privacy Center, prioritizing data privacy is just a click away. - **[Migrate Privacy Center from Heroku to Hyperforce](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_hyperforce_migration.htm&release=264.0.0&type=5)** To prepare for the retirement of the legacy Heroku-based store, transition your data governance to the secure Hyperforce architecture. Recreate your policies and migrate your records to Privacy Center 2.0 or Archive to take advantage of faster performance, advanced filtering, and seamless sandbox testing. - **[Privacy Center Definitions](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_definitions.htm&release=264.0.0&type=5)** Keep these terms in mind when working with Privacy Center. - **[Privacy Center and Data Governance Laws](https://help.salesforce.com/s/articleView?id=xcloud.privacy_center_and_data_governance_laws.htm&release=264.0.0&type=5)** Data protection and privacy guidelines change depending on where your customers are located. Privacy Center helps you comply with data governance laws such as the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CPPA) in the United States. - **[Set Up Privacy Center and Connect to Heroku](https://help.salesforce.com/s/articleView?id=xcloud.set_up_privacy_center_and_connect_to_heroku.htm&release=264.0.0&type=5)** Use Heroku to securely store your Salesforce data. Get started by installing Salesforce Privacy Center and setting up an archive for data retention. - **[Manage How Customer Data Is Retained](https://help.salesforce.com/s/articleView?id=xcloud.manage_how_customer_data_is_retained.htm&release=264.0.0&type=5)** Under data privacy law, your customers have a right to be forgotten from your org or for data to be restricted from processing. This means that you must delete, archive, or de-identify the data subject’s PII in your org within 30 days of their request. Always work with your legal team to ensure that you collaborate on policy creations and meet requirements set by your company. With Privacy Center, you can obfuscate a customer's PII, move it to storage, or delete it. - **[Setting Up Heroku External Objects with Salesforce Connect](https://help.salesforce.com/s/articleView?id=xcloud.heroku_external_objects_and_salesforce_connect.htm&release=264.0.0&type=5)** Integrate data from a Heroku Postgres database into Salesforce by using Heroku External Objects and Salesforce Connect. While the data remains in Heroku Postgres, this integration allows the data to be read from within Salesforce. Also, the data can often be written to within Salesforce. - **[Delete Data with Right to Be Forgotten Policies](https://help.salesforce.com/s/articleView?id=xcloud.right_to_be_forgotten.htm&release=264.0.0&type=5)** For data subjects who want their data removed, create Right to Be Forgotten policies to run on individual customer records. Create policies that capture the objects you want to delete, then manually run the policy on a specific record at any time. - **[Satisfy Data Subject Access Requests](https://help.salesforce.com/s/articleView?id=xcloud.data_subject_rights.htm&release=264.0.0&type=5)** The Data Subject Access Request feature in Privacy Center addresses your customers’ right to obtain a copy of their personally identifiable information (PII). #### See Also - [Data Deletion: Delete Personal Data](https://help.salesforce.com/s/articleView?id=xcloud.data_deletion.htm&release=264.0.0&type=5 "Get guidance on deleting personal data as you comply with various data protection and privacy regulations. We give you examples of common customer requests and things to consider. That way, you can determine how to best comply with the regulations that apply to your company.") - [Consent Management: Track Customer Consent and Honor Opt-Out Requests](https://help.salesforce.com/s/articleView?id=xcloud.consent_management.htm&release=264.0.0&type=5 "Track your customers’ approval for how your company interacts with them. Comply with customer requests to opt-out of sharing their personal information with third parties. To help you assess your compliance with data protection and privacy regulations, we give you examples of common customer requests. And we provide details to help you determine the best way to comply with the regulations that apply to your company.") - [Restriction of Processing: Restrict How to Process Personal Data](https://help.salesforce.com/s/articleView?id=xcloud.restriction_of_processing.htm&release=264.0.0&type=5 "Prevent the processing of your customers’ data when situations require you to do so. We give guidance on how to restrict forms of data processing. That way, you can work toward complying with the laws that are important to your company.") - [Data Access and Portability: Give Customers Their Data when They Want It](https://help.salesforce.com/s/articleView?id=xcloud.data_portability.htm&release=264.0.0&type=5 "Export customer-related data when customers request it, so that you can work toward complying with various data protection and privacy regulations. We give you examples of common customer requests and things to consider when you evaluate your compliance with the regulations that apply to you.") - [Privacy Center: Satisfy Customer Requests and Data Privacy Laws](https://help.salesforce.com/s/articleView?id=xcloud.about_privacy_center.htm&release=264.0.0&type=5 "Honor customer requests on how their sensitive data is handled, and manage components of data privacy laws like the General Data Protection Regulation (GDPR). Use the Privacy Center app to create unique policies, manage requests, and monitor the status and results of scheduled jobs.") - [Use Preference Manager to Gather Communication Preferences](https://help.salesforce.com/s/articleView?id=xcloud.preference_center_about.htm&release=264.0.0&type=5 "As privacy law continues to define individual data rights and data use regulations, it’s important to establish consent with your customers. Use the Preference Manager app within Privacy Center to meet regulatory requirements and build trust with your customers. Securely capture their preferences for how, why, and when you can contact them.") - [Policy Center: Control Data Security and Management Policies](https://help.salesforce.com/s/articleView?id=xcloud.policy_center_intro.htm&release=264.0.0&type=5 "Policy Center is your home for creating and managing different policy types across the Salesforce platform.") - [Data Export and Portability Across Salesforce](https://help.salesforce.com/s/articleView?id=xcloud.data_export_portability_across_salesforce.htm&release=264.0.0&type=5 "Export customer-related data, so that you can work toward compliance with various data protection and privacy regulations.")