Names, emails, phone numbers, addresses, and financial details our applications handle way too much personal information every day.

But once a user gives us their data, do we really know where it travels?

It can quietly travel through APIs, logs, databases, telemetry, analytics, support systems, third-party services and often without anyone stopping to ask whether it should.

We spend a lot of time securing data. But security asks, "How do we protect it?"

Privacy starts with a different question: "Should this data be here at all?"

In this session, we'll explore how developers can build applications that recognise sensitive information, understand where it is going, and automatically protect or anonymise it before it escapes its intended boundaries.

We'll look at real-world scenarios, practical techniques, and modern approaches to detecting and protecting personal information across applications, including the increasingly important boundary between our systems.

Because a data breach doesn't always start with a hacker.

Sometimes, it starts with our application knowing too much.