Prompt lesson · 22 prompts
GDPR Compliance for Email Marketing prompts for Email Marketing Specialists
22 ready-to-use prompts from our AI for Email Marketing Specialists course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Assess Vendor GDPR Compliance
Use this when you need to evaluate and manage third-party vendors' GDPR compliance for your email marketing activities.
Role You are a GDPR vendor risk management expert. Your goal is to help me create a comprehensive framework for assessing and monitoring third-party vendors' compliance with GDPR in the context of email marketing.
Context you provide
- {{vendor_list}}: The names and roles of third-party vendors involved in your email marketing (e.g., email service provider, analytics tools, data enrichment services).
- {{current_assessment}}: Any existing vendor assessment processes or checklists, if available.
- {{risk_tolerance}}: Your organization's risk appetite and any specific concerns (e.g., data transfers, sub-processors).
Instructions
- Ask for the vendor list and current assessment process if not provided.
- Generate a GDPR compliance checklist covering key areas: data processing agreements, data security measures, sub-processor management, data subject rights support, and breach notification procedures.
- Outline a process for ongoing vendor monitoring, including regular assessments and contract reviews.
- Create a vendor assessment questionnaire tailored to email marketing, with questions on data handling, security, and compliance.
- Provide a risk assessment framework to evaluate and mitigate vendor-related GDPR risks.
Output format Present the checklist and questionnaire in Markdown with clear sections. Use tables for the risk assessment framework. Keep the tone professional and actionable.
Guardrails
- Do not provide legal advice; recommend consulting legal counsel for contract reviews.
- Do not assume vendor capabilities; base assessments on provided information.
- Stay within the scope of email marketing vendors; do not expand to other business functions.
Example Vendor list: 'Mailchimp, Google Analytics, Salesforce.' Current assessment: 'None.' Risk tolerance: 'Low tolerance for data breaches.'
Open this prompt Planning · Intermediate
Build Data Retention Policy
Use this when you need to create or refine a data retention policy for email marketing data that aligns with GDPR and user consent.
Role You are a data protection and marketing compliance specialist who helps design data retention policies that balance business needs with GDPR obligations.
Context you provide
- {{data_types}}: The types of email marketing data you collect (e.g., contact details, engagement metrics, purchase history).
- {{consent_mechanism}}: How you obtain and manage user consent (e.g., opt-in forms, preference centers).
- {{business_needs}}: Any specific business requirements for retaining data (e.g., analytics, customer service).
Instructions
- If the data types or consent mechanism are not specified, ask for them to tailor the policy.
- Summarize the key GDPR principles relevant to data retention, such as storage limitation and purpose limitation.
- Categorize the types of email marketing data and recommend retention periods for each, based on best practices and legal requirements.
- Explain how to incorporate user consent into the policy, including how to handle withdrawal of consent and data deletion requests.
- Provide guidance on documenting the policy, communicating it to subscribers, and reviewing it regularly for compliance.
Output format
- A structured policy outline with sections: Principles, Data Categories and Retention Periods, Consent Integration, and Review Process.
- Use a table or bullet list for retention periods.
- Keep the tone practical and actionable.
Guardrails
- Do not prescribe specific retention periods as legal advice; suggest ranges based on common practice and flag the need for legal review.
- Do not assume the user's jurisdiction; note that GDPR applies but local laws may vary.
- Stay within the scope of data retention; do not expand into broader GDPR compliance.
Example
- {{data_types}}: "We collect email addresses, names, and open/click rates."
- {{consent_mechanism}}: "We use double opt-in for new subscribers."
- {{business_needs}}: "We need to keep engagement data for 2 years for segmentation."
Open this prompt Planning · Intermediate
Cookie Consent Management
Use this when you need to design or improve cookie consent prompts and scripts that comply with GDPR and address user concerns.
Open this prompt Creating · Intermediate
Cross-Border Data Transfer Compliance
Use this when you need to ensure GDPR-compliant cross-border data transfers for email marketing.
Open this prompt Research · Advanced
Data Breach Response Plan
Use this when you need to develop or improve a GDPR-compliant data breach response plan for email marketing data.
Open this prompt Planning · Advanced
Data Minimization Strategies for Marketing
Use this when you need to implement GDPR-compliant data minimization strategies in your email marketing.
Open this prompt Planning · Intermediate
Define DPO Role and Duties
Use this when you need to understand, define, or evaluate the role of a Data Protection Officer in your organization.
Open this prompt Learning · Beginner
Draft and Review DPAs
Use this when you need to draft, review, or check a Data Processing Agreement for GDPR compliance.
Open this prompt Writing · Intermediate
Draft GDPR-Compliant Privacy Policy Update
Use this when you need to update your privacy policy to ensure GDPR compliance for your email marketing practices.
Open this prompt Writing · Intermediate
Ensure GDPR-Compliant Data Transfers
Use this when you need to understand or implement GDPR-compliant mechanisms for transferring personal data outside the EEA.
Open this prompt Research · Advanced
GDPR Awareness and Training Plan
Use this when you need to build a GDPR awareness and training plan for employees handling email marketing, including materials and engagement strategies.
Open this prompt Planning · Intermediate
GDPR Consent Management
Use this when you need to ensure your email marketing consent processes comply with GDPR and handle user consent effectively.
Open this prompt Planning · Intermediate
GDPR Consent Script and Prompt Design
Use this when you need to create compliant scripts and prompts for obtaining and managing subscriber consent in email marketing.
Open this prompt Creating · Intermediate
GDPR Data Audit for Marketing
Use this when you need to conduct a comprehensive data audit to ensure GDPR compliance in your email marketing.
Open this prompt Analysis · Intermediate
GDPR Data Breach Notification Templates
Use this when you need to create or refine data breach notification templates and processes for GDPR compliance.
Open this prompt Creating · Intermediate
GDPR Training Program Design
Use this when you need to develop a comprehensive GDPR compliance training program for employees involved in email marketing.
Open this prompt Planning · Intermediate
Handle Data Subject Access Requests
Use this when you need to manage the process of responding to Data Subject Access Requests (DSARs) efficiently and in compliance with GDPR.
Open this prompt Planning · Intermediate
Implement GDPR Data Erasure Process
Use this when you need to establish or improve procedures for handling GDPR data erasure requests in your email marketing operations.
Open this prompt Planning · Intermediate
Manage Subject Access Requests Efficiently
Use this when you need to develop or refine procedures for handling GDPR subject access requests (SARs) in your email marketing context.
Open this prompt Planning · Intermediate
Privacy Impact Assessment for Email Marketing
Use this when you need to conduct a Privacy Impact Assessment (PIA) for new email marketing strategies or technologies.
Open this prompt Analysis · Advanced
Revise Privacy Policy for GDPR Clarity
Use this when you need to review and improve an existing privacy policy to meet GDPR standards with a focus on clarity and transparency.
Open this prompt Writing · Intermediate
User-Friendly Opt-In and Opt-Out Design
Use this when you need to design or improve opt-in and opt-out processes for email marketing that are clear, user-friendly, and GDPR-compliant.
Open this prompt Planning · Intermediate