Automating Compliance with Data Privacy Regulations on Google Cloud Platform

Automating Compliance with Data Privacy Regulations

Question

Your company runs a website that will store PII on Google Cloud Platform.

To comply with data privacy regulations, this data can only be stored for a specific amount of time and must be fully deleted after this specific period.

Data that has not yet reached the time period should not be deleted.

You want to automate the process of complying with this regulation.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

Option A - Store the data in a single Persistent Disk and delete the disk at expiration time:

This option is not recommended as it will lead to the loss of all data stored in the disk, including data that has not yet reached the expiration time. Additionally, manually deleting the disk can be time-consuming and error-prone.

Option B - Store the data in a single BigQuery table and set the appropriate table expiration time:

BigQuery is a fully-managed, cloud-native data warehouse that allows for the storage and analysis of large datasets. In this option, you can store the PII data in a single BigQuery table and set an appropriate expiration time for the table. BigQuery allows for granular control over data expiration at the table level, which means that only the data in the expired table will be deleted, leaving the rest of the data intact. You can automate the process of setting the table expiration time using BigQuery's APIs or console.

Option C - Store the data in a single Cloud Storage bucket and configure the bucket's Time to Live:

Cloud Storage is a fully-managed, highly durable object storage service that allows for the storage and retrieval of data from anywhere. In this option, you can store the PII data in a single Cloud Storage bucket and configure the bucket's Time to Live (TTL) policy. The TTL policy specifies the amount of time that objects in the bucket should be retained before they are automatically deleted. Cloud Storage provides flexibility in setting the TTL at the bucket or object level. However, it's important to note that setting the TTL policy at the bucket level will delete all objects in the bucket, regardless of their expiration time.

Option D - Store the data in a single BigTable table and set an expiration time on the column families:

BigTable is a fully-managed, scalable NoSQL database service that allows for the storage of structured data. In this option, you can store the PII data in a single BigTable table and set an expiration time on the column families. Column families allow for the grouping of related columns together, and setting an expiration time on a column family will automatically delete all data in the columns that belong to that family when the expiration time is reached. However, this option may not be the most appropriate for storing PII data, as BigTable is optimized for high-throughput and high-volume workloads.

Overall, the best option for complying with data privacy regulations is Option B - storing the data in a single BigQuery table and setting the appropriate table expiration time. This allows for granular control over data expiration at the table level, ensuring that only expired data is deleted and minimizing the risk of accidentally deleting data that has not yet reached the expiration time.