Implement a secure data-sharing platform for cross-organization collaboration
Instruction: Explain how you would design and implement a secure platform for sharing sensitive data between different organizations, ensuring data privacy and compliance.
Updated
Official answer
Begin with the approved purpose, participating organizations, data categories, allowed recipients and the threat model. Assign owners for agreements, access, retention and incident response; have the responsible specialists confirm applicable obligations. A technical architecture does not itself certify compliance.
Authenticate organizations and users, authorize each dataset/action, and minimize shared fields. Prefer scoped, time-limited access over broad copies when it satisfies the task. Validate uploads and use provenance, schema versions and integrity checks. Separate tenants in storage, caches, exports and background processing.
TLS protects transport, and server-side encryption protects stored data under its key model. Together they are not necessarily end-to-end encryption against the platform operator. If the platform must not see plaintext, design client-side encryption and key distribution accordingly, then account for the effects on search, processing, recovery and recipient access.
Record who accessed or exported which approved version, without exposing sensitive content in logs. Support revocation, expiry and required deletion, while acknowledging that revoking a token cannot erase a plaintext copy already downloaded by a recipient. Address that residual risk through minimized sharing, recipient controls and enforceable agreements.
Test unauthorized and cross-organization access, stale credentials, expiry, key loss, malformed files and incident recovery. Monitor unusual access and deletion failures. Neither encryption, a governance document nor a passed penetration test removes every disclosure risk.