Search the practice set
275 questions, 991 terms and 600 topics in 30 areas.
22 results for “Privacy-Enhancing Technologies”
Differential Privacy Budget
The cumulative privacy loss permitted across all queries against a dataset, which must be tracked and exhausted rather than applied per query.
Privacy by Design
Building privacy protections into a system's structure from the start, rather than adding controls to a design that already collects and keeps everything.
Consent Management
Capturing, storing, honouring and evidencing a data subject's permissions for specific processing purposes, including withdrawal.
Data Discovery
Automatically scanning stores to find where sensitive data actually resides, as distinct from where the documentation says it should.
Data Minimisation
Collecting and retaining only what a stated purpose requires, which reduces both regulatory exposure and breach impact at the same time.
Data Residency
A requirement that specific data be stored and sometimes processed only within a defined geography.
Personally Identifiable Information
Data relating to an identifiable person — a category far broader than name and address, and the trigger for most regulatory obligation.
Purpose Limitation
The principle that personal data collected for one stated purpose may not be used for an unrelated one without a new lawful basis.
Technology Radar
A published, periodically-reviewed view of which technologies are endorsed, tolerated, being trialled, or to be avoided.
Tokenisation
Replacing a sensitive value with a non-sensitive surrogate, with the mapping held in one tightly-controlled vault.
Product wants to add "customers who bought this also bought" using purchase history. What does privacy by design require here?
The first question is lawful basis, not architecture Purchase history was collected to fulfil orders. Using it for recommendations is a new purpose , and purpos
A GDPR erasure request arrives for a customer. Where does their data actually live, and what makes this expensive to retrofit?
Where the data lives Longer than people expect, and enumerating it is most of the work: Primary database · read replicas · caches · search indexes · analytical
A regulator asks how you ensure marketing consent withdrawal is honoured everywhere. What does the architecture need to show?
The answer they want is mechanism plus evidence Not "we have a consent database". They want to see how a withdrawal reaches every system that could act on it, a
Equifax was breached in 2017 through a vulnerability with a patch available two months earlier. Beyond "patch faster", what architectural and governance failures does that imply?
The case, as publicly reported Apache Struts vulnerability CVE 2017 5638 was disclosed in March 2017 with a patch available. An internet facing dispute portal a
Product wants to add a recommendation feature using browsing history. Legal asks for a data protection impact assessment. What does architecture need to supply?
What the assessment actually needs from architecture Legal cannot assess a feature description. They need the data facts, which only the design supplies: A data
Your organisation receives its first subject access request. Nobody knows where the person's data is. How do you respond within thirty days?
Start the clock formally and verify identity first Record the date received. Verify the requester's identity robustly — responding to an impostor is itself a di
Your platform is built on an append-only event log with a lakehouse behind it. Legal asks how you will satisfy erasure requests within 30 days. What is your answer?
Establish the actual scope first Erasure applies to personal data held about the subject, and it has exceptions — data retained under a separate legal obligatio
Privacy-Enhancing Technologies
Differential privacy, secure enclaves and federated computation, and what each buys.
Privacy Engineering
Minimisation, purpose limitation, and erasure that is implementable.
Privacy by Design
Data minimisation, default protection and purpose binding as structural decisions.
Ethics in Architecture
Privacy, accessibility, sustainability and the consequences of a design.