Automated Data Mapping
A manual spreadsheet is obsolete the moment you deploy new code. You must automate PII discovery.
Continuous Discovery
A data map (Record of Processing Activities or RoPA) tracks data from the frontend ingress to the third-party egress. If a developer adds a `stripe_id` column to a table, your CI/CD pipeline should flag it for privacy review.
| Ingress Point | Internal Storage | Egress / Third-Party |
|---|---|---|
| Checkout Form (HTTPS) | PostgreSQL `orders` table | Stripe API (Billing) |
| Newsletter Signup | Redis Cache -> PostgreSQL | Mailchimp API |
| Mobile App Telemetry | Kafka -> Clickhouse | Datadog (Scrubbed) |
Tool: PII Classification Regex Tester
Worked Example: Pipeline Scraping
In Datadog or ELK, set up log scrubbing pipelines that drop attributes matching regexes. Never let `password=` or `Authorization: Bearer` reach disk.
FAQ
What is Macaroon/Token scoping?
Tokens that contain caveats restricting their capabilities, useful for limiting API scope for third-party egress.
Explore Architecture Requirements
- GDPR Engineering
- CCPA/CPRA Technical Mechanics
- Encryption At Rest & In Transit
- Implementing Right to Erasure
- Data Portability JSON Exports
- Consent Management Architecture
- Automated Breach Response
- Cross-Border Data Transfers
- DSAR Automation Pipelines
- Catastrophic Cryptography Fails
- Database Deletion Workflows
- Gating Third-Party Scripts
- Auth via Identity Providers
- Cookie Banner Compliance
- Vendor & Subprocessor Risk
- API Privacy & Security
- End-to-End Encryption (E2EE)
- Log Retention
- Cloud Compliance
- DPO Specs
- Homepage