For software development teams who implement Privacy by Design practices, this PbD SDK provides enablers to help you easily and transparently applying best practices. Unlike other solutions, this SDK maps directly to the Data Privacy strategies to provide a complete tool kit and saves developers time from having to search, derive, or piece together disparate solutions.
Table of Contents
Here's whats new in 0.5.0:
We've made breaking changes in this newest version 0.5.0!
- For the following reasons, we have dropped the
extractorandmiddlewarefunctionality for the Data Tracker Chain and Data Usage Agreement features. (Resolves Isses #45, #46, and #49)- focus on remaining a light-weight and flexible SDK
- incompatibility issues with
actix-web version ~4 - High vulnerability found in
actix-web version 3.3.3 - High vulnerability found in
actix-rt version 1.1.1 - improved Mean Time To Resolve (MTTR) of issues
NOTE: The examples will still provide demonstration of how to implement these features using
actix-webwithout axtractors or middleware. - Updated
regexversion to fix security vulnerability - 💥 New Feature Introduced the concept of a
Data Usage Policyas part of the DUA feature. The DUP provides the extended detail that supports a DUA and implements the FidesLang Taxonomy. (Delivers #50)
- Data Usage Agreements (dua)
- Data Tracker Chain (dtc)
- Data Privacy Inspector (dpi)
- Data Security Guard (dsg)
This SDK comes with the executable examples for each of the features. The code for these examples can be found here.
- From the command line terminal, start the service using:
cargo run --example data-privacy-inspector - Then make the following http request
POST / HTTP/1.1 Host: localhost:8088 Content-Type: plain/text Content-Length: 610 Dear Aunt Bertha, I can't believe it has already been 10 years since we moved to back to the Colorado. I love Boulder and haven't thought of leaving since. So please don't worry when I tell you that we are moving in less than a week. We will be upgrading to a larger home on the other side of the city on Peak Crest Lane. It have a great view of the mountains and we will have a two car garage. We will have the same phone number, so you can still reach us. But our new address with be 1345 Peak Crest Lane Boulder, Colorado 125468. Let us know if you ever want to vist us. Sincerely, Robert- From the command line terminal, start the service using:
cargo run --example data-security-guard - Then make the following http request
GET / HTTP/1.1 Host: localhost:8088 Content-Type: application/json Content-Length: 1097 {"encrypted_data":[130,37,248,85,153,227,79,249,207,97,173,90,24,95,190,46],"encrypted_symmetric_key":[50,133,49,31,191,107,92,185,73,215,226,59,30,241,210,149,177,158,166,200,98,86,22,245,251,224,49,239,177,245,236,43,255,190,251,162,47,218,206,2,72,253,181,24,143,32,41,233,13,35,195,225,155,110,95,59,223,209,126,134,218,58,45,97,40,184,148,184,188,141,143,235,131,154,76,1,246,8,19,107,226,71,148,231,196,209,197,85,151,36,203,107,125,168,145,93,57,217,188,71,211,239,3,25,230,27,165,65,191,250,178,21,248,49,70,199,34,91,62,22,5,50,50,180,134,31,137,30,155,215,253,109,46,220,209,218,50,98,194,151,63,8,4,164,100,225,94,122,81,93,130,170,255,168,186,76,251,163,179,250,169,167,52,158,223,187,170,101,66,108,22,153,195,140,203,149,243,129,137,161,246,115,156,87,140,96,163,209,169,244,175,34,150,216,43,234,24,7,220,197,87,65,196,43,230,223,61,7,47,171,193,239,121,46,208,245,161,188,113,49,216,205,147,122,233,136,24,58,157,99,54,188,100,14,19,55,11,218,199,148,3,2,74,148,5,174,155,118,136,64,210,182,101,50,168,74],"nonce":[100,109,70,86,87,48,111,104,67,71,78,54,66,74,114,48],"padding":1}- From the command line terminal, start the service using:
cargo run --example data-tracker-chain - Then make the following http request
GET / HTTP/1.1 Host: localhost:8088 Content-Type: application/json Data-Tracker-Chain: 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- From the command line terminal, start the service using:
cargo run --example data-usage-agreement - Then make the following http request
GET / HTTP/1.1 Host: localhost:8088 Content-Type: application/json Data-Usage-Agreement: [{"agreement_name":"billing","location":"https://github.com/dsietz/pbd/blob/master/tests/duas/Patient%20Data%20Use%20Agreement.pdf","agreed_dtm": 1553988607}]The intent of the pbd development kit is to enable the implementation of privacy design strategies and tactics by providing the functionality and components for developers to implement best practices in their own software soltuions.
Details on how to contribute can be found in the CONTRIBUTING file.
pbd is primarily distributed under the terms of the Apache License (Version 2.0).
See LICENSE-APACHE "Apache License for details.