Privacy Workflows
Updated
In order to operate one of the Privacy Cloud's four options for Data Subject Rights, you must use Sprinklr's Workflow Engine (also referred to as Privacy Workflows) to apply the actions. There is a default workflow in place for each of the options listed under the Data Subject Rights within the Privacy Cloud, which can be edited to fit your brand's internal processes.
Navigate to Privacy Workflows
- Click the New Tab icon
and select Privacy Workflows under Privacy.
You'll find the default Privacy workflows, in addition to any previously created Workflows that may have been created using Sprinklr's Workflow Engine. Your options include filtering or searching within your Workflow Engine view, as well as editing, viewing or deleting an existing Workflow, and deploying or undeploying an existing Workflow. The five Default Workflows have been created for each type of Data Subject Right.
Types of Privacy Workflows
There are 4 types of Privacy Workflows. They are:
Default GDPR View Process
Default GDPR Edit Process
Default GDPR Delete Process
Default GDPR Consent Withdrawal Process
Default GDPR View Process
The Default GDPR View Process has been created for the Right to Access Cases, or the data subject's right to Transparency as defined under GDPR, meaning, the right to access the data about an individual within Sprinklr.
| # | Description |
| 1 | The first Task in the Workflow is a User Task, for which an assigned user must Approve the action of viewing the Data Subject's data within Sprinklr. |
| 2 | The second Task is a Service Task, for which a backend action will search all of Sprinklr for the Data Subject's data. |
| 3 | The third Task is a User Task, for which an assigned user must export the Data Subject's data to a CSV file. |
| 4 | Lastly, the assigned user should set the Case Status to Resolved. |
Default GDPR Edit Process
The Default GDPR Edit Process has been created for the Right to Rectify Cases or the data subject's right of Access and Rectification of their data, as defined under GDPR.
| # | Description |
| 1 | The first Task in the Workflow is a User Task, for which an assigned user must Approve the action of rectifying, or updating, the Data Subject's data within Sprinklr. |
| 2 | The second Task in the Workflow is a User Task, for which an assigned user must make the necessary changes to the Data Subject's data, such as updating a custom field associated with that person. |
| 3 | Lastly, the assigned user should set the Case Status to Resolved. |
Default GDPR Delete Process
The Default GDPR Delete Process has been created for the Right to Erasure Cases or the data subject's right to be forgotten as defined under GDPR, meaning, the right for their personal information to be deleted from Sprinklr.
| # | Description |
| 1 | The first Task in the Workflow is a User Task, for which an assigned user must Approve the action of deleting the Data Subject's data within Sprinklr. |
| 2 | The second Task is a Service Task, for which a backend action will search all of Sprinklr to locate the Data Subject's data. |
| 3 | The third Task in the Workflow is a User Task, for which an assigned user must delete the Data Subject from Sprinklr. |
| 4 | Lastly, the assigned user should set the Case Status to Resolved. At this point, you will be able to download a Certificate providing proof for the Data Subject that he/she has been erased from Sprinklr. |
Default GDPR Consent Withdrawal Process
The Default GDPR Consent Withdrawal Process has been created for the Consent Withdrawal Cases or the right to Opt Out as defined under GDPR. In Sprinklr, 'opting out' refers to adding the data subject to a GDPR Opted Out Users Profile List. After the Workflow is applied, you may choose to take further actions using the Profile List, such as adding it to a Blacklist within your Listening searches, so that you do not pull the data subjects' data.
| # | Description |
| 1 | The first Task in the Workflow is a User Task, for which an assigned user must Approve the action of Consent Withdrawal of the Data Subject's within Sprinklr. |
| 2 | The second Task in the Workflow is a User Task, for which an assigned user must take the action of Consent Withdrawal. After this task is accomplished, you may click on the Data Subject's user details to see that he/she has been added to the GDPR Opted Out Users Profile List. |
| 3 | Lastly, the assigned user should set the Case Status to Resolved. At this point, you may decide to take additional actions using this information. |