Immutable data is any type of file, data object, or piece of information that cannot be (or should not be) deleted or modified. Once collected, captured, or created in its finality, the data remains in its original format at time of record. For example, traditional applications use data bases to write and store data in a mutable format. It means that older data is over-written when new data is available. CRM data is often mutable because there is a need to modify customer contact information in data fields when they need to be updated.

In contrast, certain data such as medical records are immutable (should not be modified) because a history of the prescriptions and treatments must be maintained. Additional data is added, while the original data is preserved. Another example of immutable data is surveillance video or images. Satellites that circle the Earth which document the physical and environmental changes over time need to capture and store the data and images without overwriting it. Surveillance video footage and published movies are examples of immutable data files.

Blockchains are a form of immutable data – which means that they are resistant to modification of its data because the data in any given block cannot be altered retroactively without altering all subsequent blocks. Distributed blockchain ledgers store immutable data across its network where new linked blocks of data are created instead of being overwritten. Digital assets like crypto currencies are examples of immutable data as a permanent record.

Immutable data and storage offer protection to organizations or individuals in many ways:

Tamper-proof storage

Although ‘read-only’ policies can be set on disk drives and tape devices to protect data from being overwritten, it does not guarantee data permanence since these policies can be changed.  Immutable storage provides an advantage where it makes it difficult to lose the data due to equipment failure and human error. 

Defense against cyber and ransomware attacks

There are many security tools and processes that make it extremely difficult for attackers to inflict loss or theft to backup data. These tools provide measures to defend the systems and immutable storage devices.  Attackers or bad actors can compromise backups through unauthorized access, stealing credentials, and changing the policies for retention and deletion settings.  However, infiltrators cannot attack data that is written permanently on optical storage medium.  A simple analogy, cyber-attackers or viruses cannot penetrate immutable storage when the data is carved stone-cold with no availability to any carving tools.  

Finality of data

In a physical world that is merging with a digital world, new requirements are emerging for data finality.  It means that data, once written, is irrevocable.  Data is transformed into a state of time-locked permanence.  It provides reassurances that the solidity of data recorded will not be deleted or changed.  Immutable storage provides the capability to store evidence used for auditing, compliance, historical context, investigations, litigation holds, and vote tracking.   Finality of data is also a critical component for the interoperability of decentralized networks where the record and history of contracts in the transfer of ownership is irreversible.  When you buy and sell a home, the transaction and its records are final and cannot be modified or disputed. When you exchange a digital asset with no central authority, an irrevocable record must be created and accepted across participating nodes.  The finality of data enables truth in a trustless network.

An immutable backup is the action of replicating data to help protect against malicious or accidental data corruption, data tampering, and data deletion.  Immutable backups are an important component of cybersecurity and compliance, and they ensure backups are secure, accessible, and recoverable. Immutable backups play a vital role in guaranteeing recoverability from ransomware, error, or malicious activities.   Once data has been replicated and written, no one within or outside an organization can manipulate, change, delete, or overwrite the immutable backup.  Administrative tools and policies can be used to lock the data for periods of time.  However, a more secure method is to remove the backup from online accessibility, or to remove the storage medium itself from the drive.  Another secure method is to backup data on immutable optical storage medium such that a malicious insider cannot simply use a magnetic degausser to erase or damage the data on film.

Digital shelf-life is Storage and preservation of data can be in data center repositories that are on-premises, in the public cloud, private cloud, or a combination.  Web 3.0 decentralized cloud storage systems on peer-to-peer blockchain powered networks can also be an alternative if it fits your purpose.  Where you store and preserve your data depends on 2 main factors of consideration:  custodianship, data sovereignty, and environment.

What is data custodianship? 

Data custodianship is the control, protection, transport, and storage of data in possession according to the business rules established by its owners.  Data custodians are designated as responsible individuals or parties that manage its state.   There are typically three types of custodians: 

1. Custodial Agents – these custodians do not own or do not have rights to the data but may have legal delegation to represent the owners’ interest in the data. A simple analogy would be that regulated banks are trusted agents or financial custodians of the assets you allow them to store on their electronic ledgers in which they use to invest.  Cloud service providers do not own the data that you store on their network, however they have possession of your data, and they are entrusted to perform through contract and service level agreements.

2. Custodial Owners – these custodians own, have physical control and rights over their data. They do not delegate responsibility of the data in possession. In a financial example, when you order a physical certificate of a company share issued in your name and the certificate is delivered to you, the financial institution is no longer the custodian of the stock and has no responsibility to track the ownership or transfers of that investment. The custodial owner has physical possession, responsibility, and control of the stock certificate.  Similarly, when you create a video and store that data on your hard drive, you have full control, rights, and responsibility of that file. You can decide to share it privately, publicly – or not at all.

3. Custodial Users – these custodians do not own the data, but they have the rights to use the data. Owners transfer the rights of the data to other parties according to the terms and rules defined. Owners collect rent or other means of value in exchange for the rights of the data.  Custodial users may have possession of the data and therefore are responsible for managing and protecting the data. 

Choose to store and preserve your data based on who is able to take responsibility for the capacity and security of the data.

What is data sovereignty?

Data sovereignty is the concept of data that is subject to the laws, protection, and governance within the nation it is created or collected. It specifically addresses the issues of security and its jurisdiction as data is collected and stored across transnational borders.  Many nations have developed data sovereignty measures to protect its citizens and organizations pertaining to data privacy.  In short, data that is captured in the country – stays in that country.

Choose to store and preserve your data based on the application of national laws in the country of operations.

Data storage is any medium or device that keeps data in a state of memory or retention.  Data storage also provides the capacity to access and retrieve the data according to the requestors’ requirements of the written and retained data.  Storing data on a medium, device or location does not mean that you have backed-up, archived, or preserved the retained data. 

Data backup is the process of replicating data so that there is at least a duplicate set of data to be recovered from in any data loss event such as system failure, cyberattacks, disasters, theft, or security breach. Data backups can be done on-premises, in the cloud, or both.  The purpose of data backup is to act as a form of data protection, recovery, and insurance for an individual or organization.

Data archive is the process and policies of moving non-active aging data to a separate storage device, repository, or location for determined periods of time.  Archive data is typically data that is valuable or important to the individual or organization for future reference, protection, or regulatory compliance purposes.  The main benefit of archiving data is cost containment and improved allocation of storage resources, budgets, and performance.  Data archiving’s main difference is that it aims to retain, index, search, automate, and provide management capabilities so that files can readily be located, retrieved, deleted, or made accessible.

Data preservation is the process, policies, and actions of conserving and maintaining both the safety and integrity of high value data for an indefinite amount of time.  The purpose is to protect data, knowledge or digital assets from being lost or destroyed, and to contribute to the reuse of the data.  Data preservation acts as a method to prolong the existence and authenticity of data and its meta data.   Data preservation takes data archiving and data retention to another level through the perpetual management and remastering of data collections for future use.