5
votes
Does GDPR apply for volatile data
The GDPR isn't just about storing sensitive data, but it's more general. In fact, it's actually about processing personal data. Here are a few interesting quotes from the GDPR that you might want to ...
- 15.9k
3
votes
How can I protect data in SQL tables?
I‘m especially concerned if someone was able to get access to backend code and therefore acquire the SQL credentials.
The database system should be accessible from a limited number of systems. ...
- 34.4k
2
votes
Accepted
Does GDPR apply for volatile data
Although, I couldn't find any information on how (or if even) GDPR applies for sensitive data in a volatile state
GDPR indicates to protect data in storage, processing and in transit.
The data in ...
- 573
2
votes
Does GDPR apply for volatile data
Short answer: GDPR does not strictly require you to use encryption.
Long answer:
There are no guidelines on how to see encryption in the scope of the GDPR, which really is a pity given existing ...
- 8,939
2
votes
Security problem with confirmation email
Reinstalling shouldn't need a verification code, if they have their name and password to login. Reinstall on fresh device, log in, there is your account.
Password reset, on the other hand, implies ...
- 1,962
2
votes
Storing e-mails on private servers and getting consent from data subjects (EU GDPR)
You need to process personally identifiable information (PII) stored in e-mails so that you can run an e-mail server for your company. This means you have a legitimate interest in processing PII and ...
- 21
2
votes
Should we confirm other personal details before security questions during password resets?
Personally I thought this would be an additional step from a data protection point of view and an added level of security.
This is correct.
The disagreement I had was with the other members of my ...
- 9,462
1
vote
Accepted
sensitive assets identified and properly protected
The government uses C, S, and TS as the general material level restriction, but to think that's all they use would be a gross over simplification. Other things in play are "Need to Know" policies -- ...
- 73
1
vote
Icons/Symbols according to GDPR
Maybe you're just looking for the best RSS feeds for the latest info? In that case consider https://packetstormsecurity.com/feeds
More specifically, for your needs, I recommend following:
https://...
- 3,414
Only top scored, non community-wiki answers of a minimum length are eligible