8. of Inference
Your telemetry is tied to the users, even though your analytics couldn’t care less who the user actually is.
Threat |
|
You’re storing data that is linked to your users and doesn’t need to be. This puts you at risk in the event someone gains unauthorized access to the data. |
|
GDPR |
Chapter 2, Art. 5 – 1. (e) |
CCPA & CPRA |
CCPA 1798.100. General Duties of Businesses that Collect Personal Information (c) |
OECD |
N/A |
Mitigations |
|
|