dev.privacy: GDPR in a nutshell
summary
GDPR applies to any EU person’s data wherever it’s processed and forces demonstrable compliance: collect only necessary fields, set expiration, and document decisions. Explicit consent is required for non‑legal uses; invoices and required fields need no extra consent. A real cloud implementation shows 1.5 million users, two data centers, 600 servers with layered pseudonymization (SSO, anonymized metadata, hashed files) and strict separation of duties leading to zero‑knowledge storage. If backups are encrypted, breach notification is not required; otherwise notify. Incident practice accepts quick, imperfect response while minimizing harm.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:50DATA IS VERY IMPORTANT
- 7:25Personal data shall be
- 15:25CLOUD STORAGE ARCHITECTURE
- 16:33SEPARATION OF DUTIES
- 17:37ZERO KNOWLEDGE
related talks
39mdev.privacy: GDPR in a nutshell
48mThe impact of the GDPR
49mPractical privacy: GDPR explained
01h 00mPrivacy and GDPR: What all developers should know
56mPractical privacy - GDPR explained
23mThe GDPR impact in database project
21mGDPR – How to be compliant and what that means for your company
40mUnderstanding the GDPR and applying privacy principles in your designs