How can you use static code analysis for data and AI privacy and security work?

Explore the intersection of static code analysis in data security and data privacy. Learn how taint analysis helsp organizations protect sensitive data flows and enforce strict privacy policies, like for use cases such as GDPR compliance. Related Links: Meta's purpose limitation policy implementation: https://engineering.fb.com/2024/08/27... The paper I contributed to on policy expression via SLA/SLOs in data mesh: https://www.researchgate.net/profile/... Privado OSS that uses taint analysis: https://github.com/Privado-Inc/privado Jeorn (the project Privado used to do the taint analysis): https://github.com/joernio/joern 00:00 - Intro to Static Code Analysis 01:00 - Defining Static Analysis 02:34 - Data Flow and Taint Analysis 05:22 - Privacy and Taint Analysis 07:46 - Meta and Purpose Limitation 10:34 - Policy Zones in Practice 13:04 - Privacy in Data Mesh 15:16 - Data Declassification Methods 17:12 - Wrap Up and Questions