Hands-On Security in DevOps

Privacy data attributes

For privacy data, we must also further identify its attributes. The list of the attributes (purpose, ways of the collection, storage, format, retention period and so on.) will help to determine and review how to handle the privacy data. For example, some of the privacy data may be identified not a must to collect or no legal basis for collection, and the privacy data should never be collected.

Attributes	Describe related business flow or applications
Privacy data type	Describe collected or processed privacy data, such as name, address, phone
Purpose of collection	Describe the objective of the data collection and the business
Is it a must?	Is the data collection essential to keep the business ...