Privacy assessment for marketing campaigns
An audit of what you collect, where it lives, and how it's used — run before a list is built, so every campaign stays inside the rules that apply to you.
What the assessment covers
- Data inventory. What personal data you collect, where it comes from (forms, purchases, events, purchased or shared lists), and which systems it lives in.
- Consent and opt-out status. Whether each contact is opted in, opted out, or unknown for each channel — email, phone, text and direct message have different rules.
- Applicable rules. Which laws touch your audience and channels — for example the TCPA and state telemarketing laws for calls and texts, CAN-SPAM for email, state privacy laws such as the Texas Data Privacy and Security Act and the CCPA, and GDPR where EU residents are involved.
- Use and sharing. How data is used for segmentation, targeting and measurement, and which vendors or tools receive it.
- AI touchpoints. Which AI tools see customer data and whether that use is covered by what you've told customers.
How it runs: audit → fix → document
- Audit. We review your data sources, consent records, privacy notice and the campaign you plan to run.
- Fix. Gaps are flagged with a specific remedy — suppress these records, re-permission that segment, update this notice, change this vendor setting.
- Document. You get a written record of what was checked and what was decided, so you can show your work to a client, partner or regulator.
Why it comes first
A privacy check bolted on the day before a send can only stop the send. Run before the list is built, it shapes the list: which records are usable, for which channel, and what consent still needs to be collected. That is why every Zielit campaign is checked against consent status before launch.
Who it's for
Teams running outreach in regulated, relationship-driven sectors — financial services, healthcare and life sciences, retail and eCommerce, technology and SaaS, and professional services — and any team that has inherited a list without clear records of where it came from.
A privacy assessment is an operational review, not legal advice. Where a question needs a legal opinion, we'll say so and recommend you involve counsel.
Frequently asked questions
What is a privacy assessment in marketing?
It is a review, done before a campaign launches, of what personal data will be used, where it came from, what consent or opt-out status each contact has for the planned channel, and which privacy and marketing laws apply to the audience.
Is a privacy assessment the same as a data protection impact assessment (DPIA)?
They overlap but are not the same. A DPIA or data protection assessment is a formal document some laws require for higher-risk processing, such as targeted advertising or processing sensitive data under several US state laws. A campaign privacy assessment is narrower and operational; it can feed into a formal assessment when one is required.
Which laws does a marketing privacy assessment usually consider?
It depends on your channels and audience. Common ones are the TCPA and state telemarketing laws (calls and texts), CAN-SPAM (commercial email), state privacy laws such as the Texas Data Privacy and Security Act and the California Consumer Privacy Act, and the GDPR when EU residents are in scope.
Can I buy a privacy assessment without hiring Zielit for campaigns?
Yes. Every Zielit capability is available on its own; no bundle is required.
What do I get at the end?
A written record of what was checked, the gaps found, and the fix for each — plus a consent-status view of your list by channel.