Validating a contact | Community
Skip to main content
S
SSallee
New Participant
November 1, 2022
Solved

Validating a contact

  • November 1, 2022
  • 1 reply
  • 1696 views

We are working on GDPR policy and compliance. We have a Marketo form with GDPR options available, i.e. Data Deletion, Information Request, Object to Processing, etc... Our Data Privacy Officer will be providing the link to contacts via an email. We want to be able to validate the contact is who they say they are using tools we already have inhouse. Our Marketo instance is synced with Salesforce, which is synced with ZoomInfo. Does anyone have any suggestions or thoughts on how we might accomplish this validation with these tools?

 

Sherry Sallee

Marketing Automation Specialist, Televerde

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Darshil_Shah1

I'm not a 100% GDPR and data privacy pro but IMHO, the ideal way is to only allow people to be able to request their data on the email address that they have used on your website or request them to verify their alternate email address before releasing any of their data to a different email address.

 

Following the above, you'd essentially query and send the data of the person with the email address that they have submitted on the IR form. If they use a different email address on the IR form than the one that they used previously on your website, you should not provide them with the data without verifying the email address. To state very clearly, before sending them any data on their secondary email address, you should ask them to verify their secondary email address via their primary email address instead of relying on third-party data enrichment or insights platforms.

 

Happy to hear thoughts about this Q from others in the community as well.

 

1 reply

Darshil_Shah1
Darshil_Shah1Accepted solution
Community Manager
November 1, 2022

I'm not a 100% GDPR and data privacy pro but IMHO, the ideal way is to only allow people to be able to request their data on the email address that they have used on your website or request them to verify their alternate email address before releasing any of their data to a different email address.

 

Following the above, you'd essentially query and send the data of the person with the email address that they have submitted on the IR form. If they use a different email address on the IR form than the one that they used previously on your website, you should not provide them with the data without verifying the email address. To state very clearly, before sending them any data on their secondary email address, you should ask them to verify their secondary email address via their primary email address instead of relying on third-party data enrichment or insights platforms.

 

Happy to hear thoughts about this Q from others in the community as well.

 

    SanfordWhiteman
    SanfordWhiteman
    New Participant
    November 1, 2022

    My understanding, from working with many GDPR-subject clients, is that you may not imply any consent. Consent is explicitly provided by the proven owner of an email address.

      Terms & ConditionsAccessibility statement

      Loading footer...