Skip to main content
Level 2
Nov 1, 2022 2:33 PM UTC
Solved

Validating a contact

We are working on GDPR policy and compliance. We have a Marketo form with GDPR options available, i.e. Data Deletion, Information Request, Object to Processing, etc... Our Data Privacy Officer will be providing the link to contacts via an email. We want to be able to validate the contact is who they say they are using tools we already have inhouse. Our Marketo instance is synced with Salesforce, which is synced with ZoomInfo. Does anyone have any suggestions or thoughts on how we might accomplish this validation with these tools?

 

Sherry Sallee

Marketing Automation Specialist, Televerde

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Darshil_Shah1
Darshil_Shah1Accepted solution
Adobe Champion, Community Advisor, UG Leader
Nov 1, 2022 3:41 PM UTC

I'm not a 100% GDPR and data privacy pro but IMHO, the ideal way is to only allow people to be able to request their data on the email address that they have used on your website or request them to verify their alternate email address before releasing any of their data to a different email address.

 

Following the above, you'd essentially query and send the data of the person with the email address that they have submitted on the IR form. If they use a different email address on the IR form than the one that they used previously on your website, you should not provide them with the data without verifying the email address. To state very clearly, before sending them any data on their secondary email address, you should ask them to verify their secondary email address via their primary email address instead of relying on third-party data enrichment or insights platforms.

 

Happy to hear thoughts about this Q from others in the community as well.

 

2 replies

Darshil_Shah1
Adobe Champion, Community Advisor, UG Leader
Darshil_Shah1Adobe Champion, Community Advisor, UG LeaderAccepted solution
Adobe Champion, Community Advisor, UG Leader
Nov 1, 2022 3:41 PM UTC

I'm not a 100% GDPR and data privacy pro but IMHO, the ideal way is to only allow people to be able to request their data on the email address that they have used on your website or request them to verify their alternate email address before releasing any of their data to a different email address.

 

Following the above, you'd essentially query and send the data of the person with the email address that they have submitted on the IR form. If they use a different email address on the IR form than the one that they used previously on your website, you should not provide them with the data without verifying the email address. To state very clearly, before sending them any data on their secondary email address, you should ask them to verify their secondary email address via their primary email address instead of relying on third-party data enrichment or insights platforms.

 

Happy to hear thoughts about this Q from others in the community as well.

 

Translate
SanfordWhiteman
User Group Leader
User Group Leader
Nov 1, 2022 5:44 PM UTC

My understanding, from working with many GDPR-subject clients, is that you may not imply any consent. Consent is explicitly provided by the proven owner of an email address.

Translate