#gdpr

PII masking with Glue DataBrew — the rubric we ended up with

“A rubric that survives contact with auditors is a rubric. Everything else is a draft.”

Open-sourcing the PII Masking Starter Kit

“Get the rubric right, the rest is bookkeeping.”

Defense in depth for a connected-product fleet

“A single layer of security is hope. Seven layers, each cheap and known to its owner, is a posture.”

v2 PRD, Part 3 — identity, payment, PII, compliance

“The PRD's job in the compliance section is to draw a small box around payment data and a smaller box around customer identity, and then design every other system component to stay outside both boxes.”