Should I use one Consent Form per Brand? Or should I associate multiple Brands per Consent Form?
If you are gathering consent & preferences data for the same Data Subject Type, ex: Consumer, across all your Brands and gathering same data for this Data Subject Type across all your Brands, then you can create a single Consent Form and associate all your Brands to this Consent Form. In this case you will still be able to track latest consent per Brand or latest consent across all Brands based on your use case.
If your Data Subjects (ex: consumers) are not shared across all your Brands or if you are not gathering the same consents & preferences fields across all your Brands, then create different Consent Forms per Brand.
In addition to the data itself, you may want to consider if the Processing Purposes for collecting the data is same or different across your Brands while making the decision on one or multiple Forms.
Another consideration is if the consent & preferences data is stored in the same systems for all the Brands. If they are stored in different systems for different Brands, having a different Form per Brand would make the data transfer from CPM to your systems easier.
Brand Managers will be able to see only the Consent Forms (and consent data submitted form these forms ) associated with the Brands. If you have different Brand Managers for each of your Brands and associate all the Brands to a single Form, a particular Brand Manager will be able to see the Form and the consents submitted using this Form for other Brands for which she is not the Manager. This may be another consideration while deciding whether to create a Consent Form per Brand.
Tags: Building Consent Form, Brands
I have consumers in Europe, North America and Australia. Should I create just one Consumer Data Subject Type for all those geographical regions or should I create a different Data Subject Type for each region?
This depends on how you uniquely identify each consumer in those locations. If you uniquely identify each consumer in all those locations the same way, ex: using their ‘username’, then you may want to consider using a single DS Type ‘Consumer’ for all these regions. If you identify each individual consumer differently in each of these areas, for example: using username in North America, email in Australia, and Name & Address in Europe, then consider creating different DS Types for each of these areas.
Another consideration while making this decision is if the consumer data is stored in the same systems for all the locations. If they are stored in different systems for different locations, having a different DS Type per location would make the data transfer from CPM to your systems easier.
Tags: Building Data Subject Types
My same set of consumers are identified differently across different Channels. How do I reconcile their consents & preferences across channels?
If you are identifying a particular individual within a Data Subject Type differently across different channels, you will still be able to still collect & attribute consents to a particular individual despite the channel where consent is submitted. For example, you may be using Email as a unique identifier to identify a consumer in your marketing emails. You may be recognizing the same set of individuals using login username on your website and phone number in your mobile apps. CPM Solution allows you to aggregate all the consents across all channels for a given consumer or identify the latest consent for a given consumer across channels.
In your Consumer Data Subject Type, each identifier “group” can uniquely identify a given consumer. You can add as many groups as you need and add identifiers under each group. In the above example, for the Consumer Data Subject create three groups with Email in one group, Username in the second group and phone number in the third group.
Tags: Channels, reconcile data subjects, uniquely identifying consumers
Should my CPM user be an Admin or a Manager?
Admins have a lot of privileges in CPM. They can create Forms, Brands, Programs and Data Subject Types. They can see all the consents & preferences in the system. Hence use the Admin role judiciously.
If you have a user that needs access to only access certain Forms and consents from those forms, then make them a ‘Manager’. They can be added to a Program and they will be able to see only the consent forms associated with this program and the consent data submitted using these Forms. You can also associate a Manager to a Brand. They will be able to see only the consent forms associated with this Brand and the consent data submitted using these Forms.
In general, the best practice is to create only a couple of Admin users for Privacy Office and make the rest of the Privacy office, marketing, security and IT team members “Managers” in CPM.
Tags: Access Control, Managers, Admins, User Roles.
Should I create multiple Brands?
Brands allow consent forms to be branded. Brands allow tracking of consent & preferences per Brand. If you have multiple Brands with separate websites, logos and designs and want to reflect these in your consent forms, then consider creating a different Brand in CM for each of your Brands. This will allow you to track consents per Brands and track the Opt-in rates per Brand.
Tags: Brands