Data Protection Rules are a core component of the data governance framework within IBM Cloud Pak for Data. They are created and managed within the IBM Knowledge Catalog. These rules are then enforced by various data access services. IBM Data Virtualization is a key service that enforces these rules in real-time on virtualized assets, masking or filtering data based on user permissions. The Data Privacy service provides advanced masking capabilities, such as format-preserving redaction and obfuscation, which are essential for protecting personally identifiable information (PII) as described in the scenario. This combination of services represents the definition (IKC), advanced capability (Data Privacy), and enforcement (Data Virtualization) aspects of data protection.

A. Watson Discovery and Watson Assistant are primarily AI/NLP services and are not direct enforcers of data governance rules in the same way as data integration or virtualization tools.

B. While Data Refinery, Watson Pipelines, and Watson Studio tools do enforce these rules, this option omits the foundational service (IBM Knowledge Catalog) where rules are created and managed.

D. While DataStage, SPSS Modeler, and Python Notebooks are also enforcers of the rules, this option omits the core governance (IKC) and advanced privacy services essential to the process.

1. IBM Cloud Pak for Data Documentation - Data protection rules: "You create data protection rules in IBM Knowledge Catalog to identify the data to control and to specify the method of control... Data protection rules are enforced for a user when that user accesses an asset in a governed catalog... Examples of tools that enforce rules are Data Refinery

DataStage

SPSS Modeler

notebooks

and Data Virtualization." (Section: Data protection rules).

2. IBM Cloud Pak for Data Documentation - Masking data with Data Privacy: "The Data Privacy service provides advanced data masking to protect sensitive data... You can use advanced masking through data protection rules to mask data in projects and catalogs." (Section: Masking data with Data Privacy).

3. IBM Cloud Pak for Data Documentation - Governing virtual data: "When you virtualize data with Data Virtualization

you can add the virtual data assets to a governed catalog. Then you can use the data protection features of IBM Knowledge Catalog to protect your data." (Section: Governing virtual data).