Best Practices for Personal Data Protection in Scalable Enterprise Applications

Abstract

This article examines existing methods for protecting personal data in corporate applications, considering modern challenges in dynamic and distributed cloud environments. The study includes an extensive analysis of encryption techniques, such as proxy encryption, DNA encryption, dual encryption with fragmentation, and homomorphic encryption, as well as mechanisms for ensuring data integrity and access control. These mechanisms include cryptographic hash functions, digital signatures, message authentication codes (MAC), role-based and attribute-based access control, federated authentication, and multi-factor authentication. The research also reviews publicly available studies found on the Internet. Particular attention is given to the specifics of data protection in cloud infrastructures, where high intensity, data fragmentation, and the lack of physical security control necessitate architectural solutions such as Trusted Virtual Data Centre (TVDc) and Tera Architecture, along with the integration of security measures into the software development lifecycle (SDLC). The materials presented in this study are relevant to researchers, system architects, and corporate IT infrastructure practitioners seeking to synthesize theoretical and empirical approaches to achieve a high level of information security in the face of rapidly evolving threats.