European Vacation: Leveraging GDPR for Security
summary
Claims GDPR becomes a practical security driver not just legal overhead and can be automated to reduce risk; cites the surprising penalty of 4% of global revenue and the need for dataflow mappings. Uses Burp-derived parameter analyzer, Swagger, Python scripts, Graphviz and AWS to merge dynamic traces, static routes and API docs into CSVs and a navigable graph, producing an automated inventory that works in practice. Flags the user download portal as a single high-value attack target and backup/retention edge cases.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:38Understanding GDPR
- 3:24Defining personal data
- 6:17Operational challenges
- 9:37Security implications
- 13:04Mapping data flows
- 21:24Managing third-party risk
- 24:28Data cleanup and retention
- 26:58Protecting stored data
- 29:14Download portals and exceptions
- 34:57Q&A and conclusion
related talks
23mTransitioning GDPR from a Compliance Checklist to “Business as Usual”
39mdev.privacy: GDPR in a nutshell
30mNavigating the New AI Security Landscape
44mEmbedding GDPR into the SDLC
01h 00mPrivacy and GDPR: What all developers should know
21mBuilding Privacy Aware Infrastructure
52mDeveloping privacy
28mHow Companies Get the Personal Data They Truly Need