GDPR (General Data Protection Regulation)

GDPR in context

Subscriber identifiers (IMSI, SUPI, MSISDN, IMEI) are the anchor for authentication, charging, lawful interception and fraud analytics. Any protocol or interface that leaks a permanent identifier is treated as a serious privacy defect, which is why 5G introduced SUCI concealment on the air interface.

Moving network functions off dedicated hardware into NFV, Kubernetes and Open RAN reshapes the threat model. Isolation now depends on hypervisor, container and service-mesh controls, and supply-chain security around images, Helm charts and RIC xApps becomes as important as protocol-layer defenses.

To place GDPR in the wider telecom-security picture, review Data Retention, Subscriber, CSPM, ETSI TS 103 221, GMLC and Any-Time Interrogation (ATI).

Related terms

• Data Retention
• Subscriber
• CSPM
• ETSI TS 103 221
• GMLC
• Any-Time Interrogation (ATI)
• Behavioral Signaling Detection
• Data Localization

Related topic hubs

• VoLTE Security IMS/VoLTE signaling risk: SIP, IMS-AKA, media plane attacks.
• IMS Security Training Training on IMS, VoLTE/VoNR, SIP and RCS security.
• IMSI Catcher Rogue base stations, IMSI capture and detection.
• Telecom Security Audit Structured MNO/MVNO security audit methodology.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.