Add privacy to the security guideline about devsecopsguideline HOT 5 CLOSED

Sounds good,
Could you please share some example

from devsecopsguideline.

Something like this:

" Privacy has become a major topic for companies of all sizes, since GDPR (Europe’s General Data Protection Regulations), CCPA (California Consumer Privacy Act), LGPD – Brazil’s Lei Geral de Proteção de Dados, and other laws and regulations are being enforced around the world.

Applications that will process a large volume of PII (personally identifiable information) should adapt the DevSecOps to follow the Privacy by Design approach, where the development process addresses privacy concerns thru the whole cycle.

To start, it is important to have a good understanding of what is considered PII:

• First and last name;
• Identifiable email ([email protected]);
• Identity card numbers;
• Location data (mobile);
• IP Address.

This is not a complete list.

You have to create a PII data flow to make sure you apply the required protection to the data thru its lifecicle. You also have to follow all the requirements related to the quality and volume of processed data. "

If you believe it makes sense I can add more details and submit them.

from devsecopsguideline.

Sounds good. please add this part

from devsecopsguideline.

Are we creating another document specifically to this subject, or we'll add it to an existing one? If the latter, to which? Overview?

from devsecopsguideline.

Hey @SudE29537, Please add it wherever you want, we can restructure it again in the future.

from devsecopsguideline.