Privacy assessment

Privacy Assessment

PII risks

Form captures:

• Member name
• Email
• Phone
• Member ID
• Issue description

Risk: All is PII

Privacy approach

What we can track:

• Form type (contact/complaint) - NOT PII
• Completion status (submitted/abandoned) - NOT PII
• Device type - NOT PII
• Time to complete - NOT PII

What we do NOT track:

• Form contents (name, email, issue)
• Customer feedback (issue description)
• Personal info

Implementation safeguard

// SAFE: Only metadata
window.adobeDataLayer = [{
  form: {
    type: "complaint", // not PII
    status: "submitted", // not PII
    completionTime: 120 // seconds, not PII
  }
}];

// BLOCKED: Don't capture form data
// form.name, form.email, form.message - all blocked

---

Next: SDR extract