Compliance Beyond Security - A Cloud Native GDPR Implementation Experience

Explore a comprehensive analysis of implementing GDPR compliance in cloud-native environments through this conference talk. Delve into the evolving regulatory landscape, focusing on end-user data rights and the technical challenges they present. Learn about handling personal data across the full stack, including logs, backups, and stateful resources. Discover strategies for addressing international privacy trends, data obsolescence, and cross-border data transfers. Gain insights into cloud-agnostic compliance solutions and how to leverage Cloud Native technologies in a GDPR-compliant manner. Examine technical GDPR articles and their practical implications, concluding with an example of Compliant Kubernetes implementation.

Intro
Thought experiment
Privacy is an international trend
What is personal data?
Data obsolescence challenge
Why care about data transfers?
Data transfers, what are my options?
Solution: Cloud agnostic compliance
How to use Cloud Native in a GDPR compliant way?
Technical GDPR articles
Example bundling: Compliant Kubernetes