Some day, someone might write an authoritative book about this aspect. Let's call that inevitable book Event Centric as a placeholder title (this is a quote...)
71
stars
7
forks
source link
Problem: Data security and event carried state transfer / rich events #38
Where microservices (or subdomains) are communicating via rich events (events with added context data) how do you control for sensitive or Pi data?
This usually comes up in relation to GDPR but is a more general concern
i.e. if some fields are considered PI how do I ensure downstream systems treat them accordingly and also if one system receives a "right to be forgotten" request how do we ensure it has perculated through our entire system?
Where microservices (or subdomains) are communicating via rich events (events with added context data) how do you control for sensitive or Pi data?
This usually comes up in relation to GDPR but is a more general concern
i.e. if some fields are considered PI how do I ensure downstream systems treat them accordingly and also if one system receives a "right to be forgotten" request how do we ensure it has perculated through our entire system?