Advanced level · Module 6: Python Capstone: Deploying a Real Application · Lesson 4 of 5
Data Protection and Security Review
Review the capstone for the security and personal-data risks a real client would face before go-live.
In this lesson you will
- Run a security checklist against an application
- Identify personal data and decide how to protect it
Key concepts
personal dataleast privilegedata minimisationsecurity checklist
The lesson
Applications for clinics, schools and NGOs often hold personal data: names, phone numbers, health or payment details. Before go-live, check what you collect, why, who can see it and how long you keep it. Collect only what the client really needs.
A simple checklist catches most problems: secrets in environment variables, not Git; parameterised SQL everywhere; input validation on every endpoint; debug off; backups that work; and access limited to the people who need it.
Write down any remaining risks and how the client can reduce them. Being honest about limitations is part of professional practice.
Step by step
- List every piece of personal data the application stores.
- Run the security checklist and record the results.
- Fix the highest-risk issues.
- Write a one-page risk note for the client.
Practice activity
Complete a security and data-protection review of your capstone, fix at least two issues and hand a risk note to the client.
Expected result: A completed checklist, evidence of fixes and a clear risk note.
Check your understanding
-
What does data minimisation mean?
Show answer
Collecting and keeping only the personal data that is actually needed for the purpose.
Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.