The Missing Link in Privacy Risk Assessments
summary
Argues a specific gap in privacy risk assessments and offers a three‑prong, persona‑based method that ties data lifecycle phases to user journeys and data subject populations so controls and risks map to actual tools, teams, and touchpoints. Field tested at a global technology company, producing a tailored risk inventory, uncovering widespread instances of accepted risk, and delivering a prioritized remediation plan that supports internal audit and scales from single features to enterprise programs while remaining compatible with ISO/NIST/SOC2.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:56Problems with privacy frameworks
- 4:41Three-prong approach
- 6:06Data life cycle
- 8:11User journey assessment
- 9:56Data subject populations
- 11:23Field test results
- 13:11Emerging challenges like AI regulation
- 14:15Getting started
related talks
22mPrivacy Threat Modeling
01h 13mThe risk-based approach to privacy: How far should we go?
40mData Privacy and Security by Design
49mNew Way of Tackling Privacy Assessments
37mFrom the Trenches Privacy Engineering Pitfalls Successes
44mA Taste of Privacy Threat Modeling
28mBuild Privacy into Your Products and Gain User Trust
20mPrivacy Shift Left: A Machine-Assisted Threat Modeling Approach