Requesting PII removal for a customer

Learn how to request PII removal for a customer.

Personally Identifiable Information (PII) is a subset of personal data that refers to any information used to identify or trace a specific individual. Examples of PII include name, email address, phone number, and driver's license number. A shopper can request the removal of their PII from your company, including the person's full name, address, social security number, driver's license number, passport number, or any other information used to identify them.

You can use the GET /v1/customers/{customerId}/requestPIIRemoval resource to request PII removal for a customer. You must provide a customerId or ERID in the path. You can also log the customer's PII removal request through Global Commerce.

The value for the customerId in the Admin API is the same as the shopperId in the Shopper API.

cURL

The following example requests PII removal for a specific customer with a customerId.

curl --location --request GET 'https://api.digitalriver.com/v1/customers/{customerId}/requestPIIRemoval' \
--header 'Authorization: Basic <API_key>' \
...

The following example requests PII removal for a specific customer with an ERID and requires the x-erid-as-cid=true header.

curl --location --request GET 'https://api.digitalriver.com/v1/customers/{ERID}/requestPIIRemoval' \
--header 'Authorization: Basic <API_key>' \
--header 'header x-erid-as-cid=true' \
...

customerId and ERID 200 OK response

{
  "piiRemovalResponse": {
    "message": "Due to Digital River's legal and business obligations globally, we need to retain personal data for a defined period of time. Personal data will be removed once this period expires per our data retention policy.",
    "status": "received"
  }
}

After submitting the PII removal request, the customer will receive an email stating that Customer Service has received and processed the request. The system will log the customer's request to remove their PII and the date when Customer Service logged the request on the Order Summary page or the Shopper Details page in Global Commerce. Note that due to Digital River's legal and business obligations, Digital River will retain personal data for a defined period. Per our data retention policy, Digital River will remove personal data once this period expires.