Techniques for electronic privacy protection are disclosed. A first data record is received, including one or more sensitive data fields and one or more non-sensitive data fields. One or more encrypted data fields are generated by encrypting the one or more sensitive data fields using an encryption key. One or more hashed data fields are generated by hashing the one or more sensitive data fields using a hash function. A first mapping is stored, associating at least a portion of the first data record with the encryption key. A second data record is stored, including the one or more non-sensitive data fields, the one or more encrypted data fields, and the one or more hashed data fields.
BACKGROUND (1) Protecting consumer privacy is a challenging problem. Enterprise privacy protection should both protect sensitive data so that it cannot be tied back to a particular individual, and reduce, to the extent possible, the accessibility of sensitive data within the enterprise platform. This can help reduce data spill and increase protection for sensitive data. An undesirable approach to privacy protection can, however, cause significant problems for an organization. For example, it could create excessive organizational complexity, increasing the probability of costly misconfigurations. An undesirable approach can also have implications on the everyday operational compute costs. A privacy policy that is too restrictive also results in stunting creativity. An enterprise privacy solution should, instead, protect consumer privacy, while avoiding causing problems for the larger organization.
1. A method, comprising: receiving a first data record comprising one or more sensitive data fields and one or more non-sensitive data fields; generating an encrypted version of the one or more sensitive data fields by encrypting the one or more sensitive data fields using an encryption key; generating a one-way hashed version of the one or more sensitive data fields by hashing the one or more sensitive data fields using a one-way hash function, wherein the one-way hash function comprises one-way hashing in which the one or more sensitive data fields cannot be recovered from the one or more hashed data fields; storing a second data record comprising all three of: (i) the one or more non-sensitive data fields, (ii) the encrypted version of the one or more sensitive data fields, and (iii) the one-way hashed version of the one or more sensitive data fields hashed using the one-way hash function, wherein the one or more sensitive data fields in an original form are not stored in the second data record; and storing a first mapping associating the encrypted version of the one or more sensitive data fields with the encryption key to enable access to the one or more sensitive data fields via the second data record. ||
12. A non-transitory computer-readable medium containing computer program code that, when executed by operation of one or more computer processors, performs an operation comprising: receiving a first data record comprising one or more sensitive data fields and one or more non-sensitive data fields; generating an encrypted version of the one or more sensitive data fields by encrypting the one or more sensitive data fields using an encryption key; generating a one-way hashed version of the one or more sensitive data fields by hashing the one or more sensitive data fields using a one-way hash function, wherein the one-way hash function comprises one-way hashing in which the one or more sensitive data fields cannot be recovered from the one or more hashed data fields; storing a second data record comprising all three of: (i) the one or more non-sensitive data fields, (ii) the encrypted version of the one or more sensitive data fields, and (iii) the one-way hashed version of the one or more sensitive data fields hashed using the one-way hash function, wherein the one or more sensitive data fields in an original form are not stored in the second data record; and storing a first mapping associating the encrypted version of the one or more sensitive data fields with the encryption key to enable access to the one or more sensitive data fields via the second data record. ||
17. A system, comprising: a computer processor; and a memory having instructions stored thereon which, when executed on the computer processor, performs an operation comprising: receiving a first data record comprising one or more sensitive data fields and one or more non-sensitive data fields; generating an encrypted version of the one or more sensitive data fields by encrypting the one or more sensitive data fields using an encryption key; generating a one-way hashed version of the one or more sensitive data fields by hashing the one or more sensitive data fields using a one-way hash function, wherein the one-way hash function comprises one-way hashing in which the one or more sensitive data fields cannot be recovered from the one or more hashed data fields; storing a second data record comprising all three of: (i) the one or more non-sensitive data fields, (ii) the encrypted version of the one or more sensitive data fields, and (iii) the one-way hashed version of the one or more sensitive data fields hashed using the one-way hash function, wherein the one or more sensitive data fields in an original form are not stored in the second data record; and storing a first mapping associating the encrypted version of the one or more sensitive data fields with the encryption key to enable access to the one or more sensitive data fields via the second data record.