Privacy by Design
Kind: principle
Layer: Security Core
Record: architecture:privacy-by-design
Severity: contextual
Scope: data, product, system
Canonical: Ontology
A design rule that privacy protection is part of a system's design from its first version, covering which personal data it collects, how long it keeps it, who can see it and what its defaults expose.
Listed in Architecture principles, after Secrets Management and before Compliance.