# Privacy by Design

Record: `arch:privacy-by-design`
Kind: principle
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: mandatory for systems holding personal data
Scope: data, product, system
Canonical: https://banes-lab.com/ontology#arch-privacy-by-design

## Repair

- Refactored by: Minimize Data, Add Retention/Delete Controls
- Detected by: personal-data flow without policy
- Violated by: collecting or retaining unnecessary personal data
- Measured by: personal-data surface, retention compliance
- Enforced by: privacy review, [policy-as-code](https://banes-lab.com/records/arch/policy-as-code.md)

## requires

- [Data Minimization](https://banes-lab.com/records/lex/data-minimization.md)
- [Consent/Policy](https://banes-lab.com/records/lex/consent-policy.md)

## reinforces

- [Compliance](https://banes-lab.com/records/arch/compliance.md)
- [Security](https://banes-lab.com/records/lex/security.md)

## enables

- [Privacy Compliance](https://banes-lab.com/records/lex/privacy-compliance.md)

## conflicts-with

- [Unbounded Data Collection](https://banes-lab.com/records/lex/unbounded-data-collection.md)
- [Personal Data Oversharing](https://banes-lab.com/records/arch/personal-data-oversharing.md)

## tensions-with

- [Analytics/Personalization](https://banes-lab.com/records/lex/analytics-personalization.md)

## tensions

- [Privacy by Design Analytics/Personalization](https://banes-lab.com/records/tension/analytics-personalization-privacy-by-design.md)