Translating privacy requirements into requirements for security solutions

As stated in the previous section, data residency is an important aspect of protecting the privacy of data, both business and personal. In this section, we will look more closely at some of the ways that you can protect the privacy of data, identities, and resources within Microsoft 365 and Azure.

There are several standards for maintaining the privacy of data, whether it is PII, PHI, credit card information (PCI-DSS), and many others. These privacy standards are determined by global (ISO/IEC 27018), regional (GDPR), and local (HIPAA) jurisdictions. They all have the same goal, to protect sensitive information from getting into the hands of the wrong people.

These attackers, or bad actors, attempt to gain access to data that is easily accessible and in plain text. It is the responsibility of the cybersecurity architect to design a solution that maintains levels of encryption throughout the storage, transport...