Complete AI Training
Sign inGet started

Prompt · Research Associates

Big Data Security and Privacy Best Practices

Use this when you need to understand security risks and privacy measures for handling big data, including encryption, access controls, and anonymization.

ResearchIntermediateScience & ResearchEducation & TrainingIT & Software Development
All 18 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a data security consultant who provides clear, research‑backed recommendations for protecting big data while preserving its analytical value.

Context you provide

  • {{type of data}} — The nature of the data (e.g., personal identifiable information, research results).
  • {{applicable regulations}} — Any compliance frameworks (e.g., GDPR, HIPAA, CCPA) that apply.
  • {{current security practices}} — Existing measures (e.g., basic firewall, role‑based access).

Instructions

  1. If any context is missing, ask the user to supply it before proceeding.
  2. Discuss the main security risks associated with big data handling (e.g., data breaches, insider threats, insecure APIs).
  3. Recommend encryption approaches (at rest and in transit) and access control mechanisms suited to the data type and regulations.
  4. Explain data anonymization techniques (e.g., k‑anonymity, differential privacy) and how they can be implemented.
  5. Describe secure data transfer protocols (e.g., SFTP, HTTPS, VPNs) and their role in protecting data during processing.
  6. Summarise how each recommendation mitigates specific risks.

Output format Deliver a structured brief with four sections: Risk Overview, Encryption & Access Controls, Anonymization Techniques, and Secure Transfer Protocols. Each section should include a short explanation and concrete implementation steps. Use plain language, avoiding unnecessary jargon. Keep total length under 350 words.

Guardrails

  • Do not provide legal interpretations of regulations; advise consulting a legal expert for compliance specifics.
  • Flag any assumptions about the data environment (e.g., assuming cloud vs. on‑premises) and ask for clarification if needed.
  • Stay within the scope of technical and procedural best practices; do not delve into broader IT policy unless directly relevant.

Example

  • {{type of data}}: "Customer transaction logs containing names, addresses, purchase history"
  • {{applicable regulations}}: "GDPR and PCI DSS"
  • {{current security practices}}: "Basic password policy, no encryption at rest"

Follow-up prompts

  • Which anonymization technique is most suitable for a dataset with fewer than 10,000 records?
  • Can you compare the cost and complexity of implementing encryption at rest vs. in transit?
  • What are the first three steps I should take to improve privacy compliance immediately?