Safeguards¶
Important
In 2021-01-27, the French Data Protection Authority (CNIL) imposed a fine on both the data controller and the data processor for failing to comply with their security obligations. For details, please read this article.
Some of these safeguards might be "inconvenient" and "easy to disable". Faced with tight deadlines, it might be tempting to pressure administrators to disable some of these safeguards.
Prefer to keep these safeguards to avoid costly fines. A safeguard should only be disabled if a risk assessment determined that the cost of implementation outweighs the risk to personal data.
"Det ska vara lätt att göra rätt." (English: "It should be easy to do it right.")
We know you care about the security and uptime of your application. But all that effort goes wasted if the platform allows you to make trivial mistakes.
That is why Compliant Kubernetes is built with various safeguards, to allow you to make security and reliability easy for you.
Relevant Regulations¶
-
Taking into account the state of the art [...] the controller and the processor shall implement [...] as appropriate [...] a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.
In assessing the appropriate level of security account shall be taken in particular of the risks that are presented by processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed. [highlights added]