What's new and changed in Data Privacy

Data Privacy updates can include new features, bug fixes, and security updates. Updates are listed in reverse chronological order so that the latest release is at the beginning of the topic.

You can see a list of the new features for the platform and all of the services at What's new in IBM Cloud Pak® for Data.

Installing or upgrading Data Privacy

Ready to install or upgrade Data Privacy?

Related documentation:

Cloud Pak for Data Version 4.6.5

A new version of Data Privacy was released in April 2023 with Cloud Pak for Data 4.6.5.

Operand version: 4.6.5

This release includes the following changes:

New features

The 4.6.5 release of Data Privacy includes the following features and updates:

Redact mask all numeric data to zero
Now all numeric types of data that you mask will be redacted to 0. Numeric types of data, such as integer, float, and decimal, are redacted to 0 for all redact rules, including full, partial, or match source value length.

For details, see Redacting data method (Masking flow).

Bug fixes

This release includes the following fix:

Issue: Some emails do not follow the masking rules.

Resolution: This issue is now fixed.

Security fixes

This release includes fixes for the following security issues:

RHSA-2023:1405

CVE-2023-0215, CVE-2023-0286, CVE-2023-0361, CVE-2023-0465, CVE-2023-0466, CVE-2023-1370, CVE-2023-20860, CVE-2023-20861, CVE-2023-28155

CVE-2022-4304, CVE-2022-4450

CVE-2016-1000027

Cloud Pak for Data Version 4.6.4

A new version of Data Privacy was released in March 2023 with Cloud Pak for Data 4.6.4.

Operand version: 4.6.4

This release includes the following changes:

Security fixes

This release includes fixes for the following security issues:

RHSA-2023:0842

CVE-2023-0215, CVE-2023-0286, CVE-2023-0361, CVE-2023-23916, CVE-2023-23931, CVE-2023-24329

CVE-2022-40897, CVE-2022-4304, CVE-2022-4415, CVE-2022-4450, CVE-2022-45061, CVE-2022-48303

CVE-2021-28861, CVE-2021-39537, CVE-2021-42694

CVE-2020-10735, CVE-2020-17049

CVE-2019-12904, CVE-2019-17543, CVE-2019-4304, CVE-2019-4305

CVE-2018-1553, CVE-2018-1683, CVE-2018-20839

Cloud Pak for Data Version 4.6.3

A new version of Data Privacy was released in February 2023 with Cloud Pak for Data 4.6.3.

Operand version: 4.6.3

This release includes the following changes:

New features

The 4.6.3 release of Data Privacy includes the following features and updates:

Catalog and project asset preview performance improvement
The response speed of previewing masked data is faster when the assets contain masked data by data protection rules because data protection rules are applied synchronously to complete the masking process. Using an asynchronous job slows the asset preview response speed. However, as an exception when the data protection rules include row filtering, an asynchronous job remains to mask the data.
Bug fixes

This release includes the following fix:

Issue: Cannot mask identifier when input data contains quotations.

Resolution: This issue is now fixed.

Security fixes

This release includes fixes for the following security issues:

RHSA-2023:0116, RHSA-2023:0173

CVE-2022-25881, CVE-2022-35737, CVE-2022-3715, CVE-2022-37454, CVE-2022-3821, CVE-2022-42919, CVE-2022-45873

CVE-2021-42694, CVE-2021-46848

CVE-2020-8244

CVE-2017-20165, CVE-2017-5645

Cloud Pak for Data Version 4.6.1

A new version of Data Privacy was released in December 2022 with Cloud Pak for Data 4.6.1.

Operand version: 4.6.1

This release includes the following changes:

New features

The 4.6.1 release of Data Privacy includes the following features and updates:

Some pre-defined data protection rules are now enforced when you integrate with IBM® Security Guardium® Data Protection
When you integrate IBM Security Guardium with Cloud Pak for Data 4.6.1, you can specify that a subset of the predefined data protection rules from Cloud Pak for Data is enforced on IBM Security Guardium Data Protection. For more information, see Enforcing data protection rules with Guardium Data Protection.
Security fixes

This release includes fixes for the following security issues:

CVE-2022-23990, CVE-2022-31692, CVE-2022-35252, CVE-2022-37454, CVE-2022-42003, CVE-2022-42004, CVE-2022-42898, CVE-2022-42919, CVE-2022-43680, CVE-2022-45061

CVE-2020-17049

CVE-2019-8905, CVE-2019-8906

CVE-2018-1553, CVE-2018-16428, CVE-2018-1683, CVE-2018-1851

CVE-2017-14166

Cloud Pak for Data Version 4.6.0

A new version of Data Privacy was released in November 2022 with Cloud Pak for Data 4.6.0.

Operand version: 4.6.0

This release includes the following changes:

New features
The 4.6.0 release of Data Privacy includes the following features and updates:
The Advanced Data Privacy tool is renamed to Masking flow
Starting in the Cloud Pak for Data Version 4.6 release, the tool for Advanced Data Privacy is renamed to Masking flow. However, the Data Privacy service remains a separately installed service within Cloud Pak for Data with a dependency on Watson™ Knowledge Catalog. For more information on how to install the tools for Masking flow, see Installing Data Privacy.
Enforce data protection rules with IBM Security Guardium Data Protection
You can extend the enforcement of data protection rules to the data assets that are managed by IBM Security Guardium Data Protection outside of Cloud Pak for Data. After you integrate Watson Knowledge Catalog with IBM Security Guardium Data Protection, Guardium enforces the data protection rules that control access to data on all the data that is managed by Guardium.

For details, see Configuring Watson Knowledge Catalog data protection in the IBM Security Guardium documentation.

Enhancements to data protection rules
Data protection rules are improved so that you can:
  • Define rule conventions to determine whether access to data is allowed or denied by default.
  • Define rule actions and masking precedence to determine how multiple rules combine different actions and masking methods into a single decision.

Defining the rule conventions and precedence before you create data protection rules streamlines how the rules that are created behave and protects data consistently.

Manage rule settings screen capture.

For details, see Managing rule settings.

Simplified process for creating masking flow jobs
The updated interface makes it easier to create and run masking flow jobs to deliver data sets that are masked by data protection rules. The explanations of the masking flow options guide you in selecting and identifying the target location for newly masked data. For details, see Creating masking flows.
Bug fixes
This release includes the following fixes:

  • Updates to advanced data masking rule are not reflected when rule logic is changed or deleted

    Issue: When data masking vaulted assets and a rule configuration is deleted, updates to the advanced data masking rule are not reflected in the Asset tab of a dashboard to preview the asset.

    Resolution: This issue is now fixed.

  • Issue: Masking flow jobs fail in the default Spark 3.2 environment

    Resolution: This issue is now fixed.

Security fixes

This release includes fixes for the following security issues:

CVE-2022-2048, CVE-2022-25857, CVE-2022-26520, CVE-2022-31692, CVE-2022-3171, CVE-2022-40152, CVE-2022-40153, CVE-2022-40154, CVE-2022-40155, CVE-2022-40156, CVE-2022-42003, CVE-2022-42004, CVE-2022-42889, CVE-2022-42969

CVE-2021-22569, CVE-2021-31684, CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090, CVE-2021-43803

CVE-2020-11979

CVE-2018-1553, CVE-2018-1683, CVE-2018-1851

CVE-2017-5645