Create a Right to Be Forgotten Policy

For data subjects who want their data to be erased, create Right to Be Forgotten policies to run on individual customer records. Create policies that capture the objects that you want to be deleted, then manually run the policy on a specific record at any time. Right to Be Forgotten policies are created at the object level to ensure all customer data is removed.

Required Editions

User Permissions Needed
To create and use Right to Be Forgotten policies:	ModifyAllData and PrivacyCenter

Available in: all editions

To create a Right to Be Forgotten Policy:

From the Privacy Center dashboard, under Right to Be Forgotten Policies, click View All.
Next to Right to Be Forgotten (RTBF) Policies, click New.
Enter a name for your policy. The name must be alphanumeric, with no spaces or special characters. Then click Save & Edit.
Optionally, enter a description for your policy, and save. If you plan to create multiple policies, we recommend that you add a description.
Under Objects & Fields, choose a parent object to run the policy on. Select only one parent object for each policy. Switch the object in the policy to Active, and save. If you no longer want the object’s data to be captured by the policy, switch the object to Inactive.

Under Action on Data in Org, the Delete option is automatically selected. More options become available with the Fall ’21 release.

Note All activated objects are marked as Active in the object list.
After you add and save the parent object to the policy, you have the option to add related child objects. To see a list of child objects, click the down arrow next to the parent object’s name. Switch the child objects you want to add to the policy to Active, and save.
Click Activate. You can deactivate your policy at any time, for example, if you want to save your work but don’t want the policy to be used.