Securing Sensitive Data: A Case Study in PII Discovery & Governance for a Leading Indian Bank

Jul 08, 2023

Client

Our client is a leading Indian bank seeking to preserve data privacy compliance during their transition to cloud migration. To achieve this, they required a comprehensive overview of Personal Identifiable Information (PII) and sensitive data, including both structured and unstructured data files. As a result, we embarked on a project to provide them with expert guidance and support in this regard.

Challenges

Lack of visibility to PII and sensitive data elements.
Reduction of PII data exposure to large users.
Lack of data catalog with search functionality.
To make the discovered data future-ready.
End-to-end data lineage was missing.

LTM Solution

LTM helped the client with data privacy compliance and implemented containerized LTM PrivateEye to segregate PII and non-PII data with deeper PII data insights.

The key solution highlight consists of the following getting implemented:

Defined data governance roles for the data owners vto improve the visibility
Discovered PII and sensitive data in ADLS Gen2 repository and configured data catalog and insights for ADLS Gen2 and dedicated SQL Pool
Configured PII and sensitive data elements, including Indian Banking industry specific PII and integrated LTM PrivateEye with Azure data sources
Customized Azure Purview for data governance activities and connected to Azure Data Factory to get Data lineage
Imported existing business glossary in Azure Purview to enhance governance activities

Business Benefits

Performed ~1000 TB legacy data scanned in phases for 18 data sources
Achieved 360° visibility to PII and sensitive data elements
Segregated bank-specific PII data elements for 98 applications
Configured to ingest data lineage automatically from Azure Data Factory pipelines
Provided deeper privacy insights with custom dashboards - Asset Classification insights, Business Glossary insights, Sensitivity label insights, Asset data ownership insights