07
Interview Answer
Governance and quality wrap every YouTube data layer rather than running as a final audit. Producer contracts define schema, semantics, privacy class, and ownership; ingestion rejects malformed records to quarantine; Silver validates deduplication, identity scope, relationships, and distributions; and Gold is published only after completeness, freshness, reconciliation, semantic, and finance checks. A hard failure keeps consumers on the last certified version, while a bounded warning requires an owner, impact statement, expiry, and follow-up. DataHub, Unity Catalog, or Purview provides discovery and lineage from a Creator Studio metric back to source events and owners. Sensitive data is classified and tokenized, consent is enforced before downstream use, made-for-kids data receives stricter treatment, and RBAC/ABAC, row and column security, masking, TLS, and KMS protect access. GDPR and CCPA requests propagate deletion or anonymization through Iceberg, warehouses, caches, and feature stores, with tombstones preventing a future Bronze replay from restoring the identity. Finally, infrastructure, pipeline, data, and business monitoring route every alert with severity, owner, runbook, impact, lineage, and recent deployment context.