Understand the Provenance of Your Data | Planning for GDPR

A new product from Data8 prepares Dynamics 365 for GDPR

By Andrew Eaton

GDPR is a complex and wide-ranging topic, but some key elements that will directly impact your CRM are the requirement for recording consent and implementing the right to erasure.

data8 provenance™ targets these areas of GDPR in Microsoft Dynamics 365. It offers the ability to quickly record consent as it is given or withdrawn, and enforce those consents in your use of CRM for marketing. It also allows you to erase personal information without the problems that come from deleting records outright.

gdpr consent record screenshotRecording Consent

Store consent as it is given or withdrawn and build up an audit trail that can be referred to in case of any future disputes.

Hierarchical Consent

Arrange your consentable elements into hierarchies to make it simple to gather and withdraw consent at the appropriate level, e.g. get consent for all emails and withdraw it later just for your monthly newsletter.

Traceable Consent

Link your consent records to where the consent was gathered from, making it simpler to justify if challenged in the future.

Timestamped Consent

Each consent record is timestamped and builds on earlier records, so you can quickly see what consent you had at any point in time.

Merging Data Subjects

If you merge leads or contacts, the consent you have gathered travels with them so it is still clear whether or not you have consent on the new record.

Recording & Enforcing GDPR Processing Grounds

Record the grounds under GDPR that you are processing a marketing list (consent, legitimate interest etc.) so all bulk data processing can be justified with appropriate Privacy Impact Assessments.

Failsafe List Filtering

Ensure your marketing automation users can only see a filtered view of marketing lists, excluding any records that do not have the appropriate consent.

Right to Erasure

Implement the right to be forgotten without deleting your records.


Select which fields hold personal data and they can be either erased or securely hashed when the right to be forgotten is invoked.

Prevent Re-Importing

Use a hashed key field such as email address to prevent data being accidentally re-imported in the future after the data subject has asked for it to be erased.

Reactivate Erased Records

Using data8 duplicare™ with data8 provenance™, when a previously erased individual re-engages with you, you can quickly find and reactivate the previously erased record and re-populate the personal data fields.

data8 provenance working in conjunction with data8 duplicare™

When used together data8 provenance and data8 duplicare will provide a data governance protocol for data integrity and consent management by reducing the amount duplicate records with conflicting consent statements.   Together they also allow users to manage the health of your data against GDPR by auditing the data and producing GDPR Red Flags based upon any conflicting consent statements.

gdpr results.jpg

This can be used with the out-of-the-box contact preferences but becomes more powerful when aligned with data8 provenance as it allows you merge and track consent statements. Further to this it is possible to build entity specific rules.

In the example shown here, without using data8 provenance, data8 duplicare identifies duplicate records with differing consent statements, but without a record of the date of, it cannot resolve this conflict cannot be resolved, so a red consent flag is raised.

provenance & duplicare screenshot

Using data8 provenance to record the dates on which the consent statements are recorded, it is possible for data8 duplicare to select the consent with the most recent date.

If you would like to hear more about data8 provenance™, or any of our  other data quality products and services, please contact us

By email at info@data-8.co.uk

By phone on +44 (0) 151 355 4555

Or click here for a call-back by one of our specialists

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s