Categorization of personal data in cloud systems and research on suitable encryption methods

Cloud applications, along with many advantages brought by modern technology world, also raise concerns about personal data privacy and security. GDPR for Europe and KVKK for Turkey aim to eliminate the technical infrastructure deficiencies for data privacy that are attempted to be controlled. In this study, the application areas of international standards for the protection of personal data were evaluated. Studies on compliance with these standards have been examined and an infrastructure that can be easily updated has been tried to be created. Masking and encryption methods were examined in the details of this study. Blowfish Encryption was preferred due to attribute and the size of the data that needs to be controlled. A gateway web service application was developed to store and manage encryption processes in compliance with KVKK and its implementation was carried out on a sample CRM system. Possible usage scenarios were evaluated on the CRM system and the position of the application during the data storage process on local servers was assessed.