---
title: "General Data Protection Regulation (GDPR) in Campaign Studio"
date: "2024-02-14T06:18:38+00:00"
summary: "Ensure GDPR compliance with Campaign Studio's tools for consent management, data access, and deletion. Learn how to implement opt-in forms, handle information requests, and automate data removal processes."
image:
type: "page"
url: "/campaign-studio/general-data-protection-regulation-gdpr-campaign-studio"
id: "7b2ef30c-3e60-4dac-a5a3-cc0fd847ab33"
---

Campaign Studio enables users to be GDPR compliant.

*   [Consent to data collection](#consent-to-data-collection)
*   [Contacts requesting information](#contacts-requesting-information)
*   [The right to view data collected](#the-right-to-view-data-collected)
*   [The right to be forgotten](#the-right-to-be-forgotten)
    *   [Manual deletion](#manual-deletion)
    *   [Automated deletion](#automated-deletion)

Consent to data collection
--------------------------

Contacts that fall under GDPR requirements must consent to having their personal data collected and used for communication. Acquia recommends adding a checkbox on your Campaign Studio forms to allow contacts to opt-in. Use the following instructions to create an opt-in checkbox.

1.  Create a new **Custom Field**.
    *   Can be a Boolean Field or a Select Field.
    *   Label the field to internally mark a contact as opting in to receiving communication from you. For example: GDPR acceptance or GDPR opt-in.
2.  Edit an existing form or create a new form.
3.  On the **Fields** tab, add a **Checkbox Group** field.
4.  Add a **Label** to the field. The label displays on the contact record.
5.  On the **Contact Field** tab, map it to your newly created custom field.
6.  On the **Validation** tab, select **Yes** to require the field.
7.  On the **Properties** tab, add a label and value that are displayed next to the checkbox. For example, I agree to opt-in or I accept terms of communication.
    
    To add a link to a privacy statement, include it in the form label using an `<a>` tag. For example:
    
    ![Privacy statement example](https://acquia.widen.net/content/hgwnh5lfxk/jpeg/campaign-studio_privacy-statement-example.jpeg?position=c&color=ffffffff&quality=80&u=bbviut)
    
8.  Click **Save & close**.

By default, the checkbox is cleared. The contact must select it and submit the form to opt in. If this is a new form, add it to your Campaign Studio landing page or website. Acquia recommends updating existing forms with the new checkbox, to remain compliant.

Example screenshot of form field:

![Opting in to receive communication](https://acquia.widen.net/content/uj28d60hiu/jpeg/campaign-studio_opting-in-to-receive-communication.jpeg?position=c&color=ffffffff&quality=80&u=xizedw)

Contacts requesting information
-------------------------------

Contacts have the right to see what data has been collected about them over time. Acquia recommends creating a standalone form on your website or at the footer of your emails that contacts can fill out to request their information. This form should at least include the following fields:

*   Email address
*   Request to view data collected (Add as a custom Boolean field)
*   Request to be forgotten (Add as a custom Boolean field)

Note

The names of the fields can be changed and customized based on your business.

To build a form, follow the instructions at [Forms](/campaign-studio/components/forms). Acquia recommends setting up the following actions on the Standalone form:

*   **Send form results** or **Send Email to User** to inform team members of the requests
*   **Modify Contact’s Segment** to push these contacts in a specific GDPR segment

The benefit of adding the contacts into a GDPR segment means they can be reviewed or even communicated with at a later time.

The right to view data collected
--------------------------------

To give the data to the contact, use the following steps:

1.  Search for the contact record by name or email address in the **Contacts** section.
2.  Stay on the **Contacts** page where the contact’s information is returned in the search results.
3.  In the upper right corner, select the down arrow and then click **Export**.

All data collected in Campaign Studio exports to a CSV file to your computer.

![Exporting data in CSV](https://acquia.widen.net/content/gki7ycrmwi/jpeg/campaign-studio_exporting-data-in-csv.jpeg?position=c&color=ffffffff&quality=80&u=xizedw)

The right to be forgotten
-------------------------

Contacts have the right to request their data to be deleted. Campaign Studio allows users to delete contact records manually or through an automated process.

To delete a particular contact record from Campaign Studio and the database, perform the following steps:

### Manual deletion

1.  Search for the contact record by name or email address in the **Contacts** section.
2.  Click the contact record who requested the data deletion.
3.  In the upper right corner, select the down arrow and then click **Delete**.

All data will be deleted about this contact record.

![Deleting data](https://acquia.widen.net/content/hcnadeyqzp/jpeg/campaign-studio_deleting-data.jpeg?position=c&color=ffffffff&quality=80&u=xizedw)

### Automated deletion

1.  Create a segment using a filter with the **Request to be deleted** custom field. For more information, revisit [Consent to data collection](#consent-to-data-collection).
2.  Create a campaign using the segment as the campaign source.
3.  Create an action in the campaign of Delete Contact.

![Deleting contact](https://acquia.widen.net/content/t7n9o78jyd/jpeg/campaign-studio_deleting-contact.jpeg?position=c&color=ffffffff&quality=80&u=xizedw)

The campaign detects contacts who have requested deletion of their data (since they’ve been added to the Request to be deleted segment) and then deletes them in bulk.

Important

*   All contacts in the campaign are not immediately deleted in bulk.
*   The system deletes approximately 5000 contacts per 10 minutes so that the deletion does not affect your daily processes such as imports, segments rebuilds, and campaign event executions.
*   Making changes to the campaign does not affect the deletion process. This includes:
    
    *   Unpublishing the campaign
        
    *   Removing the contact from the campaign
        
*   To stop the deletion or make any changes to the deletion process, [create a Support ticket](https://docs.acquia.com/service-offerings/support#contact-acquia-support) immediately.