GDPR Compliance by Design
- Ishara Naotunna
- Product Marketing Manager - IAM - WSO2
GDPR Compliance by Design
GDPR compliance by design encompasses a number of privacy concerns. One aspect is how and for what purpose personal information collected from EU citizens is being used, which is governed by the feature set a software provides. The other aspect is about the storage of personal or personally identifiable information. Software developers need to adhere to proper and acceptable design when storing this data.
In this session you will learn privacy by design principles applicable when designing and developing a system. It covers the advantages of using pseudo-anonymous user names throughout the system and having centralized mapping to the real name. It also covers privacy annotations that a software developer can use so that sensitive information is masked in logs or any analytical/business reports.
This also gives an overview of how to retrofit a legacy production system with the WSO2 Privacy Toolkit so that it can be GDPR compliant when storing data.
Presenter
Jayanga is a member of WSO2 Identity Server team. He is one of the key members who spearheaded the WSO2 effort in making products GDPR complaint. As a tech enthusiast, he has contributed to multiple open source projects. His interests are in enterprise application development, application security, and distributed computing.