When designing a microservices architecture that processes personal data, which pattern best ensures GDPR compliance by minimizing data exposure across services?
-
A
Shared database pattern where all services access one central DB
-
B
Data ownership pattern where each service owns its own data store
-
C
Saga pattern where all services share a common event bus with full payloads
-
D
CQRS pattern without any data isolation between read and write models