Privacy by Design: A Microservices-Based Software Architecture Approach

Abstract

Data privacy regulations have increased significantly recently. As a result, privacy by design (PbD) has become a critical consideration for enterprises that handle personal data. PbD is no longer a plain principle. Rather than that, the General Data Protection Regulation (GDPR) addresses PbD as a required legal requirement for controllers who may face fines for non-compliance with the GDPR. In this paper, we propose a practical solution, "PbD Microservice," that can help organizations to achieve privacy regulatory compliance. We will focus on GDPR, one of the most important regulations that provides a high level of protection and control over personal data. The proposed solution depends on a microservices-based software architecture approach, which bridges the gap between data privacy regulation requirements from one side, and the system architecture and design, from the other. Moreover, the provided practical solution complies with the PbD and GDPR principles.