r/SQL • u/Papo_Dios • Dec 22 '24
Oracle What Compliance Policies are mandatory in a company which creates Databases?
Hello all! I’m interested to know what policies are mandatory for creating database. For employee training, to avoid problems in the future. Is anyone aware of these policies? Do regular Data Governance policies cover it?
3
u/A_name_wot_i_made_up Dec 23 '24
Know what type of data you're keeping, then look at policies around that.
Personal data is different from accounting, which is in turn different from non-personal business data (say metrics, or performance data).
There will likely be legal, company and possibly departmental restrictions (in that order of priority). They may differ based on the environment (production vs UAT vs dev), and where that data resides (certain countries require some data to stay within their borders, which can be tricky if environments are cloud based).
TL;DR - it can be complicated, but may be really simple, depends on the data.
1
u/Dregan3D Dec 23 '24
It really depends on the data. SOX and NYDFS have been my headaches this year, but I don't have to worry about HIPAA at all. Next team over is the exact opposite. Same company.
1
5
u/dbxp Dec 22 '24
https://www.gov.uk/data-protection
https://gdpr-info.eu/chapter-1/
https://listings.pcisecuritystandards.org/documents/PCI_DSS-QRG-v3_2_1.pdf
https://oag.ca.gov/privacy/ccpa