Data Mapping at a Billion Dollar Self-Driving Vehicle Startup

Friday, June 24, 2022 - 10:50 am11:15 am

Marc-Antoine Paré, Cruise


At Cruise, Privacy Engineering faces a large scale data mapping challenge: maintaining visibility on petabytes of sensitive data collected daily–location, imagery, and copious metadata. If that weren’t enough, data mapping must be done in the context of a rapidly changing product as we launch self-driving cars to the public. This talk describes how we did it.

In more detail, we summarize the background research that informed our approach to data mapping. Then, we cover key aspects of the technical implementation: a custom web application, high accuracy detectors for Cruise-specific sensitive data, and a validation stack for machine-assisted label verification. Finally, we present the technical privacy risk mitigations we have built on top of data mapping. These pieces all fit together into a foundational capability for Cruise Privacy Engineering, greatly aiding our ability to understand the flow of sensitive data in a way that is not possible without automation.

Marc-Antoine Paré, Cruise

Marc-Antoine Paré is a Senior Privacy Engineer at Cruise. Previously, he was the technical lead for the Department of Energy’s “Energy Data Vault”, which brought differential privacy to the energy efficiency sector.

@conference {280266,
author = {Marc-Antoine Par{\'e}},
title = {Data Mapping at a Billion Dollar {Self-Driving} Vehicle Startup},
year = {2022},
address = {Santa Clara, CA},
publisher = {USENIX Association},
month = jun

Presentation Video