“BCA Customer Profile” User Data

In this use case, BCA Bank keeps a "BCA Customer Profile" user data for each account holder, encompassing a variety of essential attributes such as driver's license particulars, current account balance, credit scores, and other relevant financial data.

Take, for example, Ramana Maharshi, who is applying for a car loan via BCA Finance. He is a multi-account holder with BCA Bank, and his customer profile is structured in the following manner:

{
  "bcaDocID": "DOC897923CP",
  "bcaDocName": "BCA Customer Profile",
  "customerID": "BCA123756108",
  "personalInfo": {
    "firstName": "Ramana",
    "_firstName_zkpass_public_": true,
    "lastName": "Maharshi",
    "dateOfBirth": "04/12/2003",
    "driverLicenseNumber": "DL77108108"
  },
  "financialInfo": {
    "averageMonthlyBalance": 200000000,
    "creditRatings": {
      "pefindo": 710,
      "CreditKarma": 755,
      "_CreditKarma_zkpass_public_": true,
      "EquiInfo": 695
    },
    "accounts": {
      "checking": {
        "accountNumber": "CHK1238569",
        "balance": 89000000
      },
      "savings": {
        "accountNumber": "SAV1231770",
        "balance": 380000000
      }
    }
  },
  "contactInfo": {
    "email": "Ramana.Maharshi@karma.org",
    "_email_zkpass_public_": true,
    "phone": "+62-856-685-0108",
    "address": {
      "street": "1000 Komodo Street",
      "city": "Jakarta",
      "zip": 12880,
      "_zip_zkpass_public_": true
    }
  }
}

As demonstrated by the above BCA Customer Profile, the user data contains sufficient information needed for the loan screening criteria set forth by BCA Finance. However, the profile also contains extraneous sensitive attributes that hold no relevance for BCA Finance's screening assessment. Transmitting the full profile to BCA Finance would not only result in superfluous data transfer but also introduce considerable risk to customer privacy. Once stored in BCA Finance's server database, such data becomes susceptible to a myriad of security vulnerabilities, ranging from advanced persistent threats (APTs) to unauthorized data access and insider attacks. This escalates the probability of data exfiltration events.