1. Is Pseudonymization the Answer to Your GDPR Problems?
Pieter van der Meer

2. Pieter van der Meer, May 16, 2023
Is Pseudonymization The
Answer To Your GDPR Problems
Pseudonymization and Kafka Connect

3. Whoami
• Pieter van der Meer
• Data Engineer / consultant @ Dataworks
• Currently working @ Essent (Dutch energy provider)
https://www.linkedin.com/in/pevandermeer/ pieter@dataworkz.nl

4. Some background

5. •Regulation (EU) 2016/679
(General Data Protection
Regulation)
•Active since May 25th,
2018
GDPR

7. Interesting sections
• Article 4, Definition 5
• Article 6.4, section e
• Article 25, Section 1
• Article 32.1, Section a
• Article 40.2, Section d
• Article 89.1

8. A very long part about,
Regulation: 2016/679
• Point A
• All done

9. Pseudomization
• Considered a foundational technique by the EU itself.
• Keep personal data separate and safe.
• Straight forward to implement.
• Only deals with the protection of the personal data.

10. Management
• Personal data is separated.
• Smaller dataset
• Easier to manage

11. Our solution

12. Kafka Connect sink
(Plus a producer)

13. Process

14. The Implementation
• Kotlin
• Multi stage processing of records
• Generic mechanism for pseudonymization algorithm
• Configuration driven

15. The code

16. Lessons learned
(Things we struggled with)
• Connect struct schema’s.
• Passthrough of the message keys.
• Field can be empty.
• From Connect struct to ProducerRecord.
• Generic way of adding mizers at compile time.

17. Questions?

18. Thank you