Data Protection

Protecting customer data means following it beyond the primary database. A bookstore might encrypt that database while an error-reporting service stores complete request bodies containing delivery addresses. If a customer later deletes a saved address, a search index and an old export may still contain it. The database control worked within its scope, but the data had already crossed other boundaries.

Data protection follows sensitive information throughout its lifecycle.

This chapter explains how to reduce collection and exposure, select appropriate storage controls, manage keys, and make retention and deletion behavior concrete. The examples use a fictional bookstore API over HTTPS at api.bookstore.example.