Securing user data

Data storage — legal liability. GDPR, CCPA.

Personal data

Name, phone, email, IP, address.

Principles

Minimum, purpose, time-bound, consent.

Encryption at rest

MySQL TDE, bcrypt passwords.

User rights

View, delete, correct.

Breach — 72h

GDPR notify.