search

OREL-group / Project-Management

Materials and assignments for Integrative Project Management course
1 stars 23 forks source link

User Privacy and Data Security #157

Open arosedale opened 8 hours ago

arosedale commented 8 hours ago

I want to ensure that my user's data is protected with encryption (HTTPS and AES) and implement GDPR/CCPA compliance. This will allow my users to feel comfortable sharing their data on this platform.

arosedale commented 8 hours ago

To do so, I will review backend data storage and user authentication with Firebase.

Review backend data storage and ensure sensitive user data is encrypted before storage. Use Firebase Authentication to secure user login and sessions. Implement secure data transfer with HTTPS for all client-server communication. Develop a Privacy Policy page that outlines how user data is handled, complying with CCPA "Do Not Sell My Data" and GDPR "Right to Be Forgotten" features.

Rescoping: For MVP, If compliance for all regions isn’t feasible, I plan to focus on US data privacy laws.