~/talk

Developing privacy

Talkat NDC Oslo 2019 · 2019-06-17..06-21· [security]

speaker

name:Glenn F. Henriksen

website:http://www.henriksen.no/

resources

video:https://youtu.be/FVS1kSEr5ic

slides:none on file

summary

Explains concrete rules from GDPR: legal bases (consent, contract, legitimate interest), fines up to €20M or 4% of global turnover, and real-world de-anonymization like AOL’s release of 20 million queries from ~650,000 users and the study that date of birth + gender + ZIP re-identifies ~80% of Americans. Recommends engineering controls: managed service identity instead of embedded DB passwords, Azure privileged identity management and Security Center auditing, encryption at rest, test-data generation with Faker, and follows the CNIL ruling on backups and retention.

AI-written summary · about

chapters (14)

related talks