Home
Welcome
The Commerce+ Transaction Server provides stable core commerce execution with a practical path to modular modernization.
Compliance
The following section describes how you can leverage Commerce+ features and functionality to help your site be compliant with different privacy and security standards.
GDPR and Commerce+
Commerce+ provides documentation and functions that your organization can use to help it on the journey to GDPR readiness. If your store operates within the European Union (EU), sells products or services to those people in the EU, or monitors the behavior of EU data subjects, your site likely needs to be GDPR compliant from May 25, 2018.
Privacy and consent
Commerce+ provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.

Welcome
The Commerce+ Transaction Server provides stable core commerce execution with a practical path to modular modernization.
- Notices
- Compliance
  The following section describes how you can leverage Commerce+ features and functionality to help your site be compliant with different privacy and security standards.
  - GDPR and Commerce+
    Commerce+ provides documentation and functions that your organization can use to help it on the journey to GDPR readiness. If your store operates within the European Union (EU), sells products or services to those people in the EU, or monitors the behavior of EU data subjects, your site likely needs to be GDPR compliant from May 25, 2018.
    - Privacy and consent
      Commerce+ provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.
      - Privacy policy acceptance
        Privacy policy acceptance refers to the process of informing shoppers about the privacy details for your site and prompting shoppers to accept the privacy policy. Commerce+ provides a combination of sample store pages, content, and business user functions to help your organization create the privacy policy pages for your store. Your organization can use the pages as a method to inform your shoppers about the privacy policy details for your site and to prompt shoppers to agree to your policy when they first visit the store. If needed, you can use the privacy policy pages to request and obtain consent from shoppers for collecting and processing personal and behavior data from the shoppers, such as for marketing purposes.
      - Consent management
        Consent management refers to the process of obtaining consent from shoppers to collect and process their personal and behavior data.Commerce+ provides a combination of store pages, content, and business user functions that your organization can use to customize your store to request and obtain consent from shoppers. For instance, your store can request and obtain consent from shoppers for collecting and processing personal and behavior data from the shoppers, such as for marketing purposes.
      - REST API enhancements
        Commerce+ provides several privacy-oriented REST API enhancements. Some are designed to provide the ability for shoppers to opt-in or opt-out of providing consent for any targeted personalization or marketing activities or promotions. Others are for internal use by Data Protection Officers.
    - Right to access
      Right to access, in accordance with the GDPR, is the right for an individual to access their personal data upon request. To help support this requirement, Commerce+ provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to access requests.
    - Right to erasure
      Right to erasure, in accordance with the GDPR, is the right for an individual to require that their personal data is deleted when the individual requests it. To help support this requirement, Commerce+ provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to erasure requests.
    - Data protection by design and default
      Data protection by design and default, in accordance with the GDPR, requires that customer data is encrypted during all communications, internal and external. Enable a Secure Sockets Layer (SSL) connection for data transfer between Commerce+ servers and the database.
  - Commerce+ and the PCI Data Security Standard
    The Payment Card Industry (PCI) Data Security Standard (DSS), developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International, facilitates the global adoption of consistent data security measures.

Privacy and consent

Commerce+ provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.