CDPSE: Certified Data Privacy Solutions Engineer

The data owner is accountable for the data’s use, associated privacy risks, and acceptance of the assessment’s recommended controls. This role therefore has the authority to approve the outcome of a privacy impact assessment.

The chief privacy officer (CPO) is the executive primarily responsible for establishing and leading the organization’s privacy management strategy and privacy program. Steering committees provide oversight and coordination, while data and security leaders have separate primary mandates.

Transport-layer encryption encrypts data while it traverses the network, so captured packets cannot be read without the required cryptographic keys.

The raw zone stores source data in its original form, so it can contain sensitive information before later validation and transformation. Sensitive content in that zone must be protected through encryption, tokenization, or comparable controls. AWS guidance likewise describes masking sensitive rows or columns before ingestion into a raw layer and encrypting the raw-layer bucket.

Offline backups provide an independent recovery source that remains available if the affected environment or connected backups are disrupted or compromised. Recovery objectives define recovery targets, but do not themselves enable restoration. GDPR Article 32 requires the ability to restore the availability of and access to personal data in a timely manner after a physical or technical incident.