Data protection

Manage the personally identifiable data for respondents and company employees

Medallia Experience Cloud collects and maintains personally identifiable data for respondents (survey takers) and users (company employees) including, but not limited to name, email address, and phone number.

To help ensure personal privacy and to comply with government regulations — including the European Union's General Data Protection Regulation (GDPR), the California Consumer Protection Act (CCPA), and others — Experience Cloud provides features for erasing personal data, including:

  • Personal data retention policy to erase personal data from import, upload, and event files after a period of time..

  • Masking of sensitive fields to hide data from unauthorized viewing.

  • Encryption of data so only authorized parties can access it.