In the context of privacy and data, ICS represents a data processor, whereas your organization is the data controller. This essentially means any data collected using ICS and its tools is owned by you and your organization, while ICS merely processes and stores that data on your behalf.
With modern data regulations like GDPR, it is a requirement that the data controller (you) carry out any requests or changes on behalf of their data subjects, i,e, your influencers.
Key Terms
Data processing - Any action performed on data, whether automated or manual
Data subject - The person whose data is processed. These are your customers or site visitors.
Data controller - The person who decides why and how personal data will be processed.
Data processor - A third party that processes personal data on behalf of a data controller
There are a few common request types that need to be satisfied, and luckily ICS has built tools to make this easy for clients to manage. All these requests can be satisfied by the Influencer Management tool in the ICS admin:
Requests to opt out
Under GDPR, an influencer has the right to, at any time, opt out and withdrawal any consent that was previously granted. This is referred to as the “Right the Object.”
In most cases, the influencer has the ability to do this via our self-guided unsubscribe flow for email, or by responding to texts with the appropriate stop code.
However in some cases where these methods aren’t pursued, an influencer might request this be done directly by you.
Requests to edit personal information
Under GDPR, an influencer has the right to request their personal information be updated. This is referred to as the “Right to rectification.” To do this, you can edit aspects of an influencer’s profile.
Requests to remove influencer data (“Right to be forgotten”)
The “Right to be forgotten” describes the regulation that guarantees the influencer the authority to request their information be completely removed from the system. ICS supports this request by allowing influencers to be anonymized, which removes any personally identifiable information from our databases.