Google Professional Data Engineer Question 15
Select 2Google Cloud PlatformYou are designing a data storage solution for a global retail company that operates in Europe and the United States. The company handles sensitive customer data, including personal information, and must comply with GDPR regulations in Europe and CCPA regulations in California. Which of the following approaches ensures compliance with regional data sovereignty requirements while maintaining efficient data access across regions?
- A
Store all data in a single multi-region bucket located in the United States to ensure simplicity and reduce operational overhead.
- B
Use separate regional storage buckets in Europe and the United States, and enforce access controls to restrict data access based on user location and compliance requirements.
- C
Implement a data replication strategy where all data is duplicated across both Europe and the United States to ensure high availability.
- D
Use Cloud Storage buckets with bucket-level policies to store data in the region where it is collected, ensuring data does not leave the region unless explicitly required for business purposes.
- E
Enable default encryption and ensure all data is encrypted in transit and at rest, but use a single global bucket for ease of management.
Show answer and explanation
Correct answers: B, D
Explanation
Data sovereignty regulations like GDPR and CCPA require that sensitive data is stored and processed within specific regions unless explicit agreements or safeguards are in place. The correct approach involves using region-specific storage and policies to ensure data remains compliant with local regulations, such as enforcing access controls and ensuring data does not leave the region unnecessarily. Options 2 and 4 meet these criteria, while others fail to address compliance or introduce risks of regulatory violations.
- A. Incorrect.
Storing all data in a single multi-region bucket in the United States does not comply with GDPR or CCPA, as it may result in European data being stored outside the EU without proper safeguards or justification.
- B. Correct.
Using separate regional storage buckets and enforcing access controls ensures that data remains within its respective region, adhering to GDPR and CCPA requirements for data sovereignty and access restrictions.
- C. Incorrect.
Replicating all data across both Europe and the United States may violate GDPR, as it could result in personal data being transferred to jurisdictions without adequate safeguards, even if it improves availability.
- D. Correct.
Storing data in region-specific buckets and implementing policies to ensure data does not leave the region aligns with GDPR and CCPA, meeting the requirements for data sovereignty and enabling localized compliance.
- E. Incorrect.
While encryption is essential for securing data, using a single global bucket does not address the regulatory requirements for data to remain within specific regions, such as the EU for GDPR compliance.