Data Privacy — Middle¶

Map collection, processing purpose, stores, replicas, exports, vendors, retention, and deletion. Use envelope encryption and rotate keys without re-encrypting all data at once. Audit access with tamper-resistant records and least privilege.

Separate product identifiers from analytics identifiers and use tokenization or aggregation when raw values are unnecessary.

Test yourself¶

1. Which replica extends retention unexpectedly?
2. How does envelope encryption support rotation?
3. What purpose limits an analytics use?
4. Which access requires audit evidence?

Continue to senior.md.