Skip to main content
LinkedIn
Copied!

Table of Contents

Defining client-based access controls to support the EU GDPR

Version:

Only available versions of this content are shown in the dropdown

Define client-based access controls (CBAC) to comply with the data privacy requirements of the European Union (EU) General Data Protection Regulation (GDPR) and similar regulations. This configuration allows you to protect customer data by tracking and processing requests to view, change, remove, and restrict the use of personal data.

Pega Customer Service provides an Exercise Customer Data Rights service case to support the General Data Protection Regulation and similar regulations. You can access this service case after defining the client-based access controls in your application. These controls are part of the supporting infrastructure that helps customer service representatives to manage Customer data rights requests and allows customers to directly manage their data through the self-service web application. For more information about how Pega applications are supporting GDPR, see Supporting EU GDPR data privacy rights in Pega Infinity with client-based access control.

In the Exercise Customer Data Rights service case, the Right to access subcase allows customers to review their data by using a PDF document that is sent by email. For more information, see "Configuring security settings for a customer data PDF document," next.
  1. Create an operator specific to the access group that is responsible for defining CBAC rules.

    Application Access group
    Pega Customer Service
    • For the CustomerService 8.5 application stack: CustomerService:GDPRCSAdmin
    • For the CustomerService 8 application stack: GDPRCSAdmin
    Pega Customer Service for Communications
    • For the CustomerServiceForComms 8.5 application stack: CustomerServiceComms:GDPRADMIN
    • For the CustomerServiceForComms 8 application stack: GDPRCSCAdmin
    Pega Customer Service for Financial Services
    • For the CustomerServiceForFS 8.5 application stack: CustomerServiceForFS:GDPRCSFSAdmin
    • For the CustomerServiceForFS 8 application stack: GDPRCSFSAdmin
    Pega Customer Service for Healthcare
    • For the CSHC 8.5 application stack: CustomerServiceHC:GDPRAdmin
    • For the CSHC 8 application stack: GDPRCSHCAdmin
    Pega Customer Service for Insurance
    • For the CustomerServiceForInsurance 8.5 application stack: CustomerServiceForIns:GDPRAdmin
    • For the CustomerServiceForInsurance 8 application stack: CSIGDPRAdmin

    This operator is used for GDPR processing and is not related to a CSR operator.

    The access group is created automatically when you create your application.
  2. To authenticate the operator, configure the GDPR-specific operator with the GDPRBasicAuth rule.

    For more information on authentication scheme planning, see Authentication in Pega Platform.
  3. Define client-based access controls (CBAC) for the Pega database. For example, Contact, Account, Address data, and Address change.

    Default CBAC rules are included with the application.
    1. Contact your legal counsel to determine the client-based access controls for making revisions, based on the interpretation of the regulation, assessment of the valid business purposes for storing and using client data, and assessment of competing legal requirements in your industry and country or jurisdiction.

    2. Identify the personal data that your application stores in the Pega database that is not known to the default Pega CRM applications.

    3. Create client-based access controls for each property.

      For more information on defining CBAC rules, see Defining client-based access control rules.
The customer service representative who is part of the GDPR access group is now able to help your customers to control their personal data.
Suggest Edit
Did you find this content helpful?

Have a question? Get answers now.

Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.

Ready to crush complexity?

Experience the benefits of Pega Community when you log in.

We'd prefer it if you saw us at our best.

Pega Community has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice
Contact us