GOVIS Test Professionals Meetup Recap: Data Privacy and Security in Non-Production Data Management

Understanding the Stakes: The "Why"

Liz MacPherson from the Office of the Privacy Commissioner (OPC) delivered a compelling presentation on the dangers of inadequate data protection in non-production environments. She emphasised that without production-like data privacy measures, organisations risk compliance issues, enforcement actions, and significant reputational damage. Liz introduced the OPC's new guidance, “Poupou Matatapu: Doing Privacy Well,” to help organisations maintain high data privacy standards.

‍Practical Solutions: The "How"

Data Domain’s Phil Judd followed with practical strategies for managing production data in non-production environments. His presentation covered:

1. Data Governance & Management: Emphasising robust data governance frameworks to ensure data privacy and security.

2. Non-Production Environment Risks: Addressing potential risks and the need for stringent security measures.

3. Methodologies & Approaches:

    Data Provisioning: Techniques like cloning, data virtualisation, and synthetic data generation.

    Data Classification & Security: Simple and advanced masking approaches such as substitution, nulling, and encryption.

     Implementation Options: Various tools and approaches for data management, including database management tools and specialised test data management solutions.
‍

Phil's presentation provided actionable steps to ensure non-production environments are secure and compliant. ‍

‍Key Takeaways

A significant takeaway was the responsibility organisations have to protect and act as soon as they become aware of potential data privacy issues. This underscores the critical role of test professionals in safeguarding their organisation’s data.

We extend our heartfelt thanks to Liz MacPherson for her insightful presentation and to Phil Judd for sharing his expertise. A special thanks to the Ministry of Social Development for hosting the event and to TTC for sponsoring and facilitating this important meetup.  

Data Domain remains committed to advancing the field of data management and security, and we look forward to continuing our collaboration with industry professionals to promote best practices in this crucial area.

On Thursday, 11th July, Data Domain participated in the GOVIS Test Professionals Meetup, focusing on Data Privacy and Security in Non-Production Data Management, with emphasis on Test Environments. This session highlighted the importance of maintaining orchestrated data security and control in non-production environments.