Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis.
What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?
Click on the arrows to vote for the correct answer
A. B. C. D.C.
https://cloud.google.com/solutions/pci-dss-compliance-in-gcp#using_data_loss_prevention_api_to_sanitize_dataThe recommended approach for sanitizing personally identifiable information (PII) or payment card information before initial storage in Cloud Bigtable is to de-identify the data using the Cloud Data Loss Prevention (DLP) API.
Option A, Hashing using SHA256, is not a recommended approach for PII or payment card information since hashing is a one-way function that cannot be reversed. Therefore, it cannot be used to retrieve the original data and can cause problems with data retrieval and analysis.
Option B, Encrypting using elliptic curve cryptography, can be an effective approach to protect sensitive data. However, it is not recommended for this scenario since encrypted data can still be identified as PII or payment card information and may require additional steps to protect it.
Option D, Using regular expressions to find and redact phone numbers, email addresses, and credit card numbers, can be useful in some scenarios, but it is not recommended for this scenario since it may not capture all instances of PII or payment card information, and it can be time-consuming to maintain the list of patterns to search for.
The recommended approach is Option C, De-identifying the data with the Cloud Data Loss Prevention API. The Cloud DLP API can help identify and classify sensitive data such as PII and payment card information and then replace that information with a token or a random value to protect the privacy of the data. The de-identified data can still be useful for analysis and retention purposes while minimizing the risk of exposing sensitive data to unauthorized parties.
In summary, the recommended approach for sanitizing PII or payment card information before initial storage in Cloud Bigtable is to use the Cloud Data Loss Prevention API to de-identify the data.