Data Privacy Compliance in Cloud-Based Databases: Technical Mechanisms and Regulatory Alignment

Authors

  • Bharath Kishore Gudepu, Praveen Kumar Pemmasani, Krishna Chaitanya Gonugunta

Keywords:

Data Privacy, Cloud Databases, Regulatory Compliance, GDPR, CCPA, HIPAA, Encryption, Data Anonymization, Access Control, Audit Logging, Data Lifecycle Management, Shared Responsibility Model, Privacy by Design, Confidential Computing, Differential Privacy.

Abstract

The migration of sensitive data to cloud-based databases introduces complex privacy compliance challenges under frameworks like GDPR, CCPA, and HIPAA. This paper provides a comprehensive technical analysis of achieving and maintaining data privacy compliance in cloud database environments. We dissect the unique risks inherent in cloud architectures (IaaS, PaaS, SaaS), map core regulatory obligations to technical controls, and evaluate advanced privacy-enhancing technologies (PETs) including encryption (at-rest, in-transit, homomorphic), robust anonymization (differential privacy, k-anonymity), granular access control (ABAC, RBAC), and immutable auditing. Critical operational considerations like the Shared Responsibility Model, Data Lifecycle Management (DLM), and continuous compliance monitoring are examined. A comparative analysis of native capabilities in AWS, Azure, and GCP is presented, alongside key selection criteria. We identify emerging challenges posed by AI/ML, multi-cloud complexity, and quantum computing, concluding with essential implementation methodologies grounded in Privacy by Design and DataSecOps. Research synthesizes developments up to June 2023.

Downloads

Download data is not yet available.

References

Aggarwal, C. C., & Yu, P. S. (2017). Enforcing privacy in cloud databases. In Privacy-Preserving Data Mining: Models and Algorithms (pp. 11–52). Springer. https://doi.org/10.1007/978-3-319-64283-3_5

Alenezi, M., & Alotaibi, R. (2021). A systematic literature review on cloud computing security: Threats and mitigation strategies. IEEE Access, 9, 10244–10263.

Al-Momani, A., & Al-Momani, O. (2023). Multiuser privacy and security conflicts in the cloud. In Proceedings of the 2023 CHI Conference on Human Factors in Computing Systems (pp. 1–12). ACM. https://doi.org/10.1145/3544548.3581307

Li, M., Yu, S., Zheng, Y., Ren, K., & Lou, W. (2013). Scalable and secure sharing of personal health records in cloud computing using attribute-based encryption. IEEE Transactions on Parallel and Distributed Systems, 24(1), 131–143. https://doi.org/10.1109/TPDS.2012.97

Liu, Q., Tan, C. C., Wu, J., & Wang, G. (2011). Reliable and privacy-preserving data access control in cloud computing services. Computers & Security, 30(8), 508–520. https://doi.org/10.1016/j.cose.2011.07.001

Marpaung, O. S., Sihombing, H., & Ginting, A. B. (2023). Security and privacy issues in cloud-based databases: A literature review. 2023 1st International Conference on Information Technology and Advanced Communications (ICICTA) (pp. 1–6). IEEE.

Schunter, M., & Russinovich, M. (2023). Confidential computing: Elevating cloud security and privacy. ACM Queue, 21(4), 20–31. https://doi.org/10.1145/3623461

Singh, J., Pasquier, T., Bacon, J., & Ko, R. K. L. (2020). Tracking GDPR compliance in cloud-based service delivery. 2020 IEEE International Conference on Cloud Engineering (IC2E) (pp. 1–11). IEEE. https://doi.org/10.1109/IC2E48721.2020.00010

Singh, J., Pasquier, T., Bacon, J., & Ko, R. K. L. (2021). Checking GDPR compliance for cloud-based services. 2021 IEEE International Conference on Cloud Engineering (IC2E) (pp. 1–12). IEEE. https://doi.org/10.1109/IC2E50001.2021.00010

Goyal, M. K., Gadam, H., & Sundaramoorthy, P. (2023). Real-Time Supply Chain Resilience: Predictive Analytics for Global Food Security and Perishable Goods. Available at SSRN 5272929.

Singh, J., Powles, J. E., Pasquier, T., & Bacon, J. M. (2015). Data flow management and compliance in cloud computing. IEEE Cloud Computing, 2(6), 24–32. https://doi.org/10.1109/MCC.2015.95

Goyal, Mahesh Kumar, and R. Chaturvedi. "Synthetic Data Revolutionizes Rare Disease Research: How Large Language Models and Generative AI are Overcoming Data Scarcity and Privacy Challenges." International Journal on Recent and Innovation Trends in Computing and Communication 11.11 (2023): 1368-1380.

Soveizi, N., Turkmen, F., & Karastoyanova, D. (2023). Security and privacy concerns in cloud-based scientific and business workflows: A systematic review. Future Generation Computer Systems, 145, 1–12. https://doi.org/10.1016/j.future.2023.05.015

Tsai, Y.-C., Wang, S.-L., & Hong, T.-P. (2023). Privacy preservation in big data analytics. In Granular, Fuzzy, and Soft Computing (pp. 1–12). Springer. https://doi.org/10.1007/978-1-0716-2628-3_755

Wang, Y., & Chen, S. (2019). Privacy protection and data security in cloud computing: A survey, challenges, and solutions. IEEE Access, 7, 147420–147452. https://doi.org/10.1109/ACCESS.2019.2945035

Zhang, Y., & Li, X. (2023). A data analysis privacy regulation compliance scheme for lakehouse. In Proceedings of the 2023 2nd International Conference on Algorithms, Data Mining, and Information Technology (pp. 1–6). ACM. https://doi.org/10.1145/3625403.3625405

Zhou, C., Barati, M., & Shafiq, O. (2023). A compliance-based architecture for supporting GDPR accountability in cloud computing. Future Generation Computer Systems, 145, 134–145. https://doi.org/10.1016/j.future.2023.03.021

Downloads

Published

20.09.2023

How to Cite

Bharath Kishore Gudepu. (2023). Data Privacy Compliance in Cloud-Based Databases: Technical Mechanisms and Regulatory Alignment. International Journal of Intelligent Systems and Applications in Engineering, 11(11s), 911 –. Retrieved from https://ijisae.org/index.php/IJISAE/article/view/7795

Issue

Vol. 11 No. 11s (2023)

Section

Research Article

License

Creative Commons License

This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.

All papers should be submitted electronically. All submitted manuscripts must be original work that is not under submission at another journal or under consideration for publication in another form, such as a monograph or chapter of a book. Authors of submitted papers are obligated not to submit their paper for publication elsewhere until an editorial decision is rendered on their submission. Further, authors of accepted papers are prohibited from publishing the results in other publications that appear before the paper is published in the Journal unless they receive approval for doing so from the Editor-In-Chief.

IJISAE open access articles are licensed under a Creative Commons Attribution-ShareAlike 4.0 International License. This license lets the audience to give appropriate credit, provide a link to the license, and indicate if changes were made and if they remix, transform, or build upon the material, they must distribute contributions under the same license as the original.