topic Re: GDPR/LGPD Compliance in Administration & Architecture

GDPR/LGPD Compliance

William_Scardua — Thu, 20 Mar 2025 16:36:47 GMT

How do you work to compliance the GDPR/LGPD, in special to people data ?

have any suggestion ?

Re: GDPR/LGPD Compliance

Prabakar — Fri, 03 Dec 2021 16:20:16 GMT

Hi @William Scardua Please refer to the below-mentioned documents for security and compliance-related information.

https://databricks.com/wp-content/uploads/2018/08/Databricks_Compliance_Program_Datasheet_180730.pdf

https://databricks.com/product/azure/security-and-compliance

https://databricks.com/product/databricks-enterprise-security-culture

https://docs.databricks.com/security/privacy/gdpr-delta.html

https://docs.databricks.com/security/index.html

Re: GDPR/LGPD Compliance

Hubert-Dudek — Fri, 03 Dec 2021 16:50:05 GMT

I recently set scanner in Azure for data lake using Azure Purview (I am not fun of results which it gives as it didn't detect anything, maybe I do something wrong). There is also AWS Macie to scan for personal data.

Re: GDPR/LGPD Compliance

jose_gonzalez — Tue, 07 Dec 2021 00:18:36 GMT

Hi @William Scardua ,

I think you can reach out to our accounts team in case you would like to get more information on this topic.

Re: GDPR/LGPD Compliance

-werners- — Tue, 07 Dec 2021 07:07:19 GMT

there is identifying PII data and handling/storing PII data.

Identifying can be done with Purview, Macie, other tools. Those are not free ofc, so if your env is pretty big it can be interesting. Otherwise, you could also do manual checks.

For storing: PII data should not be mixed with other data. Put it in a separated zone, encrypted etc with strict permissions AND also a solution for data retention.

Delta Lake makes this a lot easier tbh (delete statement).