Re:The Nightmare Letter: A Subject Access Request Under GDPR
by insomniacity on Saturday March 17, 2018 @12:31PM
(#16607676)
You can get most of the way there though: https://diogomonica.com/2017/10/08/crypto-anchors-exfiltrati...
Re:The Nightmare Letter: A Subject Access Request Under GDPR
by Silhouette on Saturday March 17, 2018 @01:19PM
(#16607962)
Yes and no. That is the kind of measure that can help, but it's going to be very difficult to keep all relevant data within such a tightly controlled environment.
At some point you will probably need to work with the real data to do anything useful with it. There are situations where you really can operate on obfuscated/encrypted data, such as comparing password hashes, but these tend to be the exception rather than the rule.
And so, if you're compromised at a point with access to the raw data, or anywhere else from which access to such a point can be gained, you've still lost control of the data.
There are technologies you can use (with varying degrees of effectiveness) to reduce the risk of data leaking by monitoring or intercepting specific mechanisms through which leaks can occur, but you can never have reasonable certainty in this respect.