When it comes to data privacy governance, we will need more than just role-based access control (RBAC) or attribute-based access control (ABAC) which are common in securing access control. Data governance requires additional metadata or tags to define the data classification, and also row-level attribute-based access control for data masking or row filtering. Take data centers in both the EU and US as an example—we would like to have granular access control policies, as follows:
- US support team can only query US data, and cannot view EU data
- EU support team can only query EU data, and cannot view US data
- The age is considered PII and can only be displayed as a range for the US support team
- The age cannot be displayed to the EU support team
- The ID is PII and will be applied with data masking
This example shows privacy by...
