Comment implémenter le Privacy Engineering en 2026

mkdir privacy-engineer-demo
cd privacy-engineer-demo
npm init -y
npm install typescript @types/node crypto-js ts-node
npm install -D @types/crypto-js
npx tsc --init
mkdir src
data/users.json

import CryptoJS from 'crypto-js';
import fs from 'fs';

type User = { id: number; email: string; ip: string; name: string };

const users: User[] = JSON.parse(fs.readFileSync('./data/users.json', 'utf-8'));

const isPII = (value: string): boolean => {
  const emailRegex = /[^@\s]+@[^@\s\.]+\.[^@\s\.]+/;
  const ipRegex = /\b(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b/;
  return emailRegex.test(value) || ipRegex.test(value) || value.length > 3;
};

const pseudonymize = (value: string, salt: string = 'privacy-salt-2026'): string => {
  return CryptoJS.SHA256(value + salt).toString();
};

const processUsers = () => {
  const processed = users.map(user => {
    const emailHash = isPII(user.email) ? pseudonymize(user.email) : user.email;
    const ipHash = isPII(user.ip) ? pseudonymize(user.ip) : user.ip;
    const nameHash = isPII(user.name) ? pseudonymize(user.name) : user.name;
    return { ...user, email: emailHash, ip: ipHash, name: nameHash };
  });
  fs.writeFileSync('./data/users-pseudonymized.json', JSON.stringify(processed, null, 2));
  console.log('PII pseudonymisés avec succès !');
};

processUsers();

import fs from 'fs';

import type { User } from './pii-handler';

const users: User[] = JSON.parse(fs.readFileSync('./data/users-pseudonymized.json', 'utf-8'));

const anonymize = (user: User): any => {
  return {
    userId: user.id,
    email: `user_${user.id}@anon.com`, // Remplace par faux email
    ip: '0.0.0.0', // IP neutre
    name: `User_${user.id}`, // ID générique
    timestamp: new Date().toISOString()
  };
};

const anonymizedData = users.map(anonymize);
fs.writeFileSync('./data/users-anonymized.json', JSON.stringify(anonymizedData, null, 2));
console.log('Données anonymisées pour analytics !');

class ConsentManager {
  private consents: { [key: string]: boolean } = JSON.parse(localStorage.getItem('privacy-consents') || '{}');

  requestConsent(type: 'analytics' | 'marketing' | 'cookies'): Promise<boolean> {
    return new Promise((resolve) => {
      if (this.consents[type] !== undefined) {
        resolve(this.consents[type]);
        return;
      }
      const banner = document.createElement('div');
      banner.innerHTML = `
        <div style="position:fixed;bottom:0;width:100%;background:#000;color:#fff;padding:20px;z-index:9999;">
          Autoriser <strong>${type}</strong> ? <button id="accept-${type}">Oui</button> <button id="reject-${type}">Non</button>
        </div>`;
      document.body.appendChild(banner);
      document.getElementById(`accept-${type}`)?.addEventListener('click', () => {
        this.setConsent(type, true);
        document.body.removeChild(banner);
        resolve(true);
      });
      document.getElementById(`reject-${type}`)?.addEventListener('click', () => {
        this.setConsent(type, false);
        document.body.removeChild(banner);
        resolve(false);
      });
    });
  }

  private setConsent(type: string, value: boolean): void {
    this.consents[type] = value;
    localStorage.setItem('privacy-consents', JSON.stringify(this.consents));
  }

  hasConsent(type: string): boolean {
    return this.consents[type] === true;
  }
}

// Usage exemple (à caller avant traitement)
const manager = new ConsentManager();
manager.requestConsent('analytics').then(hasConsent => {
  if (hasConsent) {
    console.log('Analytics OK, process data');
  } else {
    console.log('Pas de consent, skip');
  }
});

version: '1.0'
salt: 'unique-salt-change-in-prod-2026'
pii_fields:
  - email
  - ip
  - name
  - phone
consent_types:
  analytics:
    description: 'Pour Google Analytics'
    required: false
  marketing:
    description: 'Newsletters'
    required: true
anonymization_rules:
  ip: '0.0.0.0'
  email: 'user_{id}@anon.com'
retention_days:
  logs: 30
  pii: 365

{
  "name": "privacy-engineer-demo",
  "version": "1.0.0",
  "scripts": {
    "detect": "ts-node src/pii-handler.ts",
    "anonymize": "ts-node src/anonymizer.ts",
    "full-privacy": "npm run detect && npm run anonymize",
    "consent-test": "ts-node src/consent-manager.ts"
  },
  "dependencies": {
    "typescript": "^5.0.0",
    "crypto-js": "^4.2.0",
    "@types/node": "^20.0.0",
    "ts-node": "^10.9.0",
    "@types/crypto-js": "^4.2.0"
  }
}