Database management engine for a database management system

One or more computer-storage media having computer-executable instructions embodied thereon that, when executed by a computing system having a processor and memory, cause the computing system to:

• access, at a database management engine, a database that supports a privacy-based first-class data entity having at least one privacy system-level metadata property;
• generate a backup copy of the database at an earlier timestamp, the backup copy is associated with a database transaction journal configured to log at least one database operation and a privacy journal configured to log at least one privacy database operation associated with the privacy-based first-class data entity and the at least one privacy system-level metadata property;
• execute, at a respective timestamp later than the earlier timestamp, a database operation on the database, the database operation is associated with the privacy-based first-class data entity and the at least one privacy system-level metadata property, the database operation comprises at least one of a data definition language (DDL) command, a data control language (DCL) command, a transition control language (TCL) command, a command specifying a relational database entity, or a command specifying a value for the privacy system-level metadata property;
• based on executing the database operation, record, in the database transaction journal and the privacy journal, the database operation, the database operation is recorded in the privacy journal as a privacy database operation;
• subsequent to the database operation being executed a the respective timestamp, detect an error in the database;
• based on detecting the error in the database, restore the database to the backup copy of the database generated at the earlier timestamp;
• based on restoring the database to the backup copy, determine that the privacy database operation has not been executed on the database since the restore;
• based on the earlier timestamp, the respective timestamp, and determining that the privacy database operation has not been executed on the database since the restore, generate a privacy compliance notification specifying that the database is noncompliant;
• and
• cause a security mitigation action to be performed.

A computer-implemented method, comprising:

• accessing, at a database management engine, a database that supports a privacy-based first-class data entity having a privacy system-level metadata property;
• based on a restoration operation executed on the database to restore the database to a backup copy of the database associated with an earlier timestamp, identifying, in a privacy journal, a privacy database operation that has a respective timestamp later than the earlier timestamp associated with the backup copy of the database and that has not been executed on the database since the restore, wherein the privacy database operation comprises at least one of a data definition language (DDL) command, a data control language (DCL) command, a transition control language (TCL) command, a command specifying a relational database entity, or a command specifying a value for the privacy system-level metadata property;
• and
• based on the earlier timestamp, the respective timestamp, and identifying privacy database operation that has not been executed on the database since the restore, causing a security mitigation action to be performed.