Configuring PII Data Hashing in Hardal

Overview

Privacy protection is a critical part of modern data collection. Hardal offers robust data redaction capabilities that allow you to hash personally identifiable information (PII) before it’s stored in your analytics database. This guide explains how to configure Hardal’s data hashing settings after your initial setup to ensure compliance with privacy regulations like GDPR, CCPA, and other data protection laws.

This guide assumes you have already completed the basic Hardal setup. If you haven’t set up Hardal yet, please refer to the Getting Started guide first.

Why Hash PII Data?

Hashing PII data provides several important benefits:

  • Enhanced Privacy: Protects your users’ sensitive information from unauthorized access
  • Regulatory Compliance: Helps meet requirements of privacy regulations like GDPR and CCPA
  • Risk Reduction: Minimizes the impact of potential data breaches
  • User Trust: Demonstrates your commitment to protecting customer data

While hashing provides an additional layer of security, it should be part of a comprehensive data protection strategy. Hashing is a one-way process - once enabled, the original data cannot be recovered.

Accessing Security Settings

1

Log into your Hardal Dashboard

Access your Hardal dashboard using your credentials

2

Navigate to Security Settings

Go to SettingsSecurity in the main navigation

3

Access Data Redaction Rules

Look for the “Data Redaction Rules” section which contains all PII hashing configuration options

Configuring Redaction Rules

Each redaction rule consists of three main components:

  1. Pattern Matching: Regular expressions that identify the data to be hashed
  2. Target Fields: The specific data fields where the pattern should be applied
  3. Hash Values: Configuration for how the data should be hashed
1

Enable Email Redaction

Toggle the switch to enable email address redaction

2

Review Pattern Matching

The default pattern ([a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}) captures email addresses. You can modify this if needed.

3

Customize Target Fields

By default, fields named “email” and “user_email” are targeted. Add any additional field names where email addresses might appear in your data.

Best Practices

Prioritize the most sensitive data types first, typically email addresses, phone numbers, and unique identifiers.

Troubleshooting

Compliance Considerations

While Hardal’s data hashing features can help with privacy compliance, remember that:

Data hashing is just one aspect of privacy compliance. You should consult with legal experts to ensure your full data handling practices meet all applicable regulations.

  • GDPR: Consider whether you need to hash data or fully anonymize it
  • CCPA: Ensure your privacy policy accurately describes your data hashing practices
  • Local Regulations: Some jurisdictions may have specific requirements for data protection