Client-based access control (CBAC) is a technique for securely processing requests to view, update, or remove personal client data. By implementing CBAC in your application, you can comply with the data privacy requirements of the European Union General Data Protection Regulation (GDPR) and similar regulations.

The following figure illustrates the process for client-based access control.

CBAC request example with Pega Marketing application

You can also enforce restrictions on the use of this data in application functions.

For more information about using client-based access control, see Supporting EU GDPR data privacy rights in Pega Infinity with client-based access control.