Design it in. Don't patch it on.
Privacy is cheapest when it's a design decision and most expensive when it's a post-breach fix.
Design principles
Build With These
- Collect the minimum the task needs
- Private by default
- De-identify as early as possible
- Limit who and what can access it
- Build deletion in from day one
Before you build
Checkpoints
- Impact assessment for personal info
- Information Officer consulted
- Vendor agreement in place
- Logging switched on
- Retention period decided
Private by default. Always.