Building Privacy Aware Infrastructure
summary
Claims GDPR is the de facto center for regulation and compliance work, with concrete policies attached to data elements (example: US bank statements retention ≤ seven years). Infrastructure patterns: annotate data at API/DB level, propagate policy propagation alongside context through the invocation tree, and build data lineage using production sampling, instrumentation, dynamic analysis or static probes. Recommended investments by scale: startups add context propagation and basic encryption/access control; growing firms enforce policies; large orgs run continuous compliance and automated breach detection with evidence generation.
AI-written summary · about
chapters (10)
- 0:00intro
- 0:14privacy
- 1:17why privacy matters
- 1:43understanding privacy regulations
- 3:54core privacy principles
- 6:28building privacy-focused infrastructure
- 9:05data understanding and lineage
- 12:21privacy practices and measures
- 16:23privacy investments by company size
- 20:39conclusion and key takeaways
related talks
01h 15mDATA PROTECTION ENGINEERING: WHAT IS THE ROAD AHEAD?
44mEmbedding GDPR into the SDLC
10mPrivacy-Preserving Analytics on the Ground
37mDelivering High Speed with Low Risk
46mDeveloping for Privacy
22mData Privacy & Compliance in a integrated Hybrid Cloud Environment
16mCache-22: Doing Privacy Engineering with Privacy Standards
01h 01mAcademic sessions on data protection law and privacy