Shield Platform Encryption & Compliance

1// Security & Compliance Patterns
2
3public with sharing class ComplianceService {
4    
5    // 1. CRUD/FLS enforcement
6    public static List<Account> getAccountsSecure() {
7        // Check object-level access
8        if (!Schema.SObjectType.Account.isAccessible()) {
9            throw new SecurityException('No access to Account object');
10        }
11        
12        List<Account> accounts = [
13            SELECT Id, Name, Phone, Industry, AnnualRevenue
14            FROM Account LIMIT 100
15        ];
16        
17        // Strip fields the user can't access (FLS)
18        SObjectAccessDecision decision = Security.stripInaccessible(
19            AccessType.READABLE, accounts
20        );
21        
22        return (List<Account>) decision.getRecords();
23    }
24    
25    // 2. Secure DML with FLS
26    public static void updateAccountSecure(Account acc) {
27        // Check update permission
28        if (!Schema.SObjectType.Account.isUpdateable()) {
29            throw new SecurityException('No update access to Account');
30        }
31        
32        // Strip fields the user can't update
33        SObjectAccessDecision decision = Security.stripInaccessible(
34            AccessType.UPDATABLE, new List<Account>{acc}
35        );
36        
37        update decision.getRecords();
38    }
39    
40    // 3. GDPR — Right to Erasure
41    public static void handleErasureRequest(String email) {
42        // Find all records related to this person
43        List<Contact> contacts = [
44            SELECT Id, AccountId FROM Contact WHERE Email = :email
45        ];
46        List<Lead> leads = [
47            SELECT Id FROM Lead WHERE Email = :email
48        ];
49        
50        // Anonymize or delete based on business requirements
51        for (Contact c : contacts) {
52            c.FirstName = 'REDACTED';
53            c.LastName = 'REDACTED';
54            c.Email = null;
55            c.Phone = null;
56            c.MailingStreet = null;
57        }
58        update contacts;
59        
60        if (!leads.isEmpty()) {
61            delete leads;
62        }
63        
64        // Log the erasure for compliance
65        insert new Privacy_Request_Log__c(
66            Request_Type__c = 'Erasure',
67            Subject_Email__c = email,
68            Processed_Date__c = Datetime.now(),
69            Records_Affected__c = contacts.size() + leads.size()
70        );
71    }
72    
73    // 4. Data export for portability (GDPR Right to Access)
74    public static String exportPersonalData(String email) {
75        Contact contact = [
76            SELECT FirstName, LastName, Email, Phone, 
77                   MailingAddress, Account.Name
78            FROM Contact WHERE Email = :email LIMIT 1
79        ];
80        
81        Map<String, Object> exportData = new Map<String, Object>{
82            'name' => contact.FirstName + ' ' + contact.LastName,
83            'email' => contact.Email,
84            'phone' => contact.Phone,
85            'company' => contact.Account?.Name,
86            'exportDate' => Datetime.now().format()
87        };
88        
89        return JSON.serializePretty(exportData);
90    }
91    
92    // 5. Audit trail logging
93    public static void logSensitiveAccess(Id recordId, String action) {
94        insert new Audit_Log__c(
95            Record_Id__c = recordId,
96            Action__c = action,
97            User__c = UserInfo.getUserId(),
98            Timestamp__c = Datetime.now(),
99            IP_Address__c = Auth.SessionManagement.getCurrentSession()?.get('SourceIp')
100        );
101    }
102    
103    // 6. Encryption-aware code
104    public static void handleEncryptedFields() {
105        // When Shield Platform Encryption is enabled:
106        // - Cannot filter on encrypted fields in SOQL WHERE
107        // - Cannot use encrypted fields in ORDER BY
108        // - Formula fields referencing encrypted fields are limited
109        
110        // Pattern: Query by non-encrypted field, then filter in Apex
111        List<Contact> allContacts = [
112            SELECT Id, FirstName, LastName, SSN__c  // SSN__c is encrypted
113            FROM Contact
114            WHERE AccountId = :accountId
115        ];
116        
117        // Filter encrypted field in Apex (not SOQL)
118        Contact match = null;
119        for (Contact c : allContacts) {
120            if (c.SSN__c == targetSSN) {
121                match = c;
122                break;
123            }
124        }
125    }
126}