Deep Dive Workshop – Data Security and Data Protection
summary
Cloud adoption forces clear tradeoffs and concrete controls: expect contractual Article 28 clauses, DPIAs and transfer impact assessments after Schrems II, and measure security by data classification and data-centric security (discovery → classify → protect → monitor). Concrete tools cited: Azure AD/conditional access, HSMs, BYOK limits, ISO 27001/27701, TensorFlow Privacy and differential privacy for maps and mobility reports. Claims and numbers: average breach costs €4.3M, Microsoft spends $1B/year with 3,500 security staff, Corona app hit ~18M downloads. The practical solution shown is industrialized pseudonymization — separation of PID and content — to vaccinate data against breaches.
AI-written summary · about
chapters (16)
- 0:00Start
- 2:04New World of Cloud?
- 6:07Trade Offs
- 8:39Privacy Risks?
- 14:05Who owns the risk?
- 22:31Privacy & Security in the Cloud
- 34:23CORE is an internationally active technology think tank and trusted partner of institutions leveraging IT to develop successful businesses
- 36:10Technology as the key to enable digitalization and to ensure data protection in order to limit technology based cyber security threats
- 37:23Challenges in the implementation of data protection measures are frequently based on wrong perceptions
- 38:52As a modern regulation, GDPR reflects the role of technology as a solution for data protection requirements
- 40:26Access control combines powerful individual measures into a tiered security layer - more holistic in the cloud
- 41:56Several methods provide tools to protect data whereas cryptography is still an underestimated key technology
- 43:47Zero trust networking and at-rest encryption are common techniques to ensure privacy in cloud environments
- 45:51The functional separation of pseudonymization makes the Privacy Shield obsolete and creates new business areas
- 48:02Concentrating on a cloud strategy offers great potential in a variety of dimensions with an emphasis on business infrastructure development
- 49:44Integral data protection is achieved by combining business, IT and data protection strategies into one overall company strategy
related talks
39mdev.privacy: GDPR in a nutshell
52mDeveloping privacy
01h 15mDATA PROTECTION ENGINEERING: WHAT IS THE ROAD AHEAD?
01h 16mSecurity meets data protection: risk assessment, standards and certification
39mBuilding a secure data platform: why good design and security go hand in hand
47mNew Developments in the Field of Data Protection For a More Successful Data Economy
32mNew Developments in Cloud Technology and Data Security For Practitioners
01h 01mAcademic sessions on data protection law and privacy