3. of minimization
Our testing data is a month-old copy from production. Fake data just does not have the same feel to it.
|
Threat |
|
|
|
You use real data for testing without anonymizing it, which could potentially give employees visibility to personal data they should otherwise not have access to. It also is open to potential theft. Often, testing environments aren’t offered the same protection as production environments and are, therefore, more open to being breached and data being stolen. |
|
GDPR |
Chapter 2, Art. 5 – 1 (b) Chapter 2, Art. 5 – 1 (f) Chapter 2, Art. 6 – 1 |
|
CCPA and CPRA |
CCPA 1798.100. General Duties of Businesses that Collect Personal Information (a)(1) CCPA 1798.100. General Duties of Businesses that Collect Personal... |
