数据安全合规

如果需要满足个人隐私相关的法律法规，或者出于对企业重要数据（代码、战略计划、安全凭据）的保护需求，可以通过系统建设数据安全合规能力，保护个人隐私数据和企业重要数据，来满足法律法规要求或者企业安全内控需求。

☐ BP 3.1	Required	Privacy by design.
☐ BP 3.2	Required	Classify and protect data
☐ BP 3.3	Required	Understand data classifications and their protection policies.
☐ BP 3.4	Required	Identify the source data owners and have them set the data classifications.
☐ BP 3.5	Required	Record data classifications into the Data Catalog so that analytics workload can understand.
☐ BP 3.6	Required	Implement encryption policies.
☐ BP 3.7	Required	Implement data retention policies for each class of data in the analytics workload.
☐ BP 3.8	Recommended	Enforce downstream systems to honor the data classifications.

参考资料

[AWS Docs] 3 – Designing data platforms for governance and compliance