Question

A development team is building a new customer support portal. To support forensic investigations, they configure the application to capture full audit logs that include the complete request body of every user interaction, retained indefinitely by default. The privacy engineer reviewing the design notes that these request bodies frequently contain sensitive personal data such as health complaints and payment references. Applying privacy by design and privacy by default principles, what is the MOST appropriate recommendation?

Accepted Answer

Redact or exclude personal data fields from audit log payloads and set a defined retention period aligned to the forensic purpose

Answer

Keep the full-body logging but encrypt the log store and restrict access to the security team

Answer

Disable audit logging entirely to eliminate the risk of capturing personal data

Answer

Retain full logs but obtain broad consent from users covering all possible future forensic uses