Rabobank, a Dutch multi-national bank and financial services company, is working with IBM to use cryptographic pseudonyms on its client’s personal data to innovate and comply with the EU's General Data Protection Regulation.
Beginning May 25, the GDPR seeks to create a harmonized data protection law framework across the EU and it aims to give citizens back control of their personal data, while imposing strict rules on those hosting, moving, and 'processing' this data, anywhere in the world. Rabobank is addressing GDPR compliance across a number of activities.
In one project with IBM Services and IBM Research, the bank has cryptographically transformed terabytes of its most sensitive client data, including names, birth dates and account numbers, into a desensitized representation—meaning, it looks and behaves like the real data, but it’s not. Pseudonymization enhances privacy by replacing most identifying fields within a data record by one or more artificial...