Encryption v2

Enable encryption for specific columns in your database to protect sensitive data. Encryption safeguards confidential information against unauthorized access and is recommended for handling sensitive fields such as personal identifiers, financial data, or authentication credentials. Encryption is supported for all sources with many integrated connection types.

Encrypted entities cannot be edited

Encrypted entities cannot be edited once created. If you need to make changes, you must delete the entity and create a new one.

Enable encryption

Before you can use encryption, ensure that Data Privacy Encryption is initialized in your Fabric environment. For more information, see: Initialize Data Privacy Encryption in Fabric.

Info

When encryption is applied, the column is replaced by another column named {columnname}_encrypted.
These columns will always be of datatype String.
For more details, see Data Privacy.

Encrypt your data

To encrypt your data, follow these steps:

1. Enable encryption by selecting the Privacy Entity option for your entity.
2. Enter the exact (case-sensitive) column names to encrypt.
3. Choose your preferred privacy option for each column (currently only Encrypt is available).
4. Indicate which columns are foreign keys. This allows the foreign key to still work when the column is encrypted.
5. Only when migrating an existing legacy encryption key, specify its secret name in Entity Values under KeyName; new v2 entities generate their DEK automatically.

Warning

Foreign keys are hashed in addition to being encrypted. Hashing is less secure than encryption, but it allows for foreign key relationships to be maintained.

Deduplication

For privacy entities, the deduplication mode should be configured in the Landing Zone entity values instead of the Bronze Layer entity values. For more details about what options you have for the deduplication modes, see Deduplication Modes.

Custom notebooks

Follow these steps to enable encryption for your custom notebook.