Personal Data Oversharing

Kind: anti-pattern

Layer: Enforcement Core

Aliases: Unbounded Data Collection

Record: architecture:personal-data-oversharing

Severity: discouraged

Scope: architecture_evolution

Formed by: Collect, store, log, transmit, or expose more personal data than needed for the declared purpose.

Canonical: Ontology

A defect in which more personal data is collected, kept, logged or exposed than the declared purpose needs.

Listed in Architecture principles, after Secret Sprawl and before Observability Noise.

Refactored by

• Purpose Binding
• Field Redaction
• Retention Policy

Severity

• discouraged

Category

• Anti-patterns

Force

• Architecture evolution

Detected by

• runtime/entrypoints/leak.entrypoint.ts

Negated by

• Privacy by Design

Violates

• Privacy by Design

Linked from

• Anti-patterns
• Security / Privacy / Compliance / Governance
• Security Privacy Compliance
• Severity levels
• The forces