planifest Privacy By Design
Overview
Use this skill to make privacy requirements explicit, enforceable, and testable before implementation.
Scope Boundaries
- Use this skill when the task matches the trigger condition described in
description. - Do not use this skill when the primary task falls outside this skill's domain.
Shared References
- Lawful basis and minimization rules:
references/lawful-basis-and-minimization-rules.md
Templates And Assets
- Privacy control matrix template:
assets/privacy-control-matrix-template.csv
- Data lifecycle map template:
assets/data-lifecycle-map-template.md
Inputs To Gather
- Feature scope and personal-data touchpoints.
- Applicable legal/policy obligations for target markets.
- Data flow boundaries and third-party transfers.
- Retention and user-rights operational capabilities.
Deliverables
- Privacy control matrix with ownership.
- Data lifecycle map from collection to deletion.
- Consent/notice and user-rights requirements.
- Residual privacy risk and approval record.
Workflow
- Map lifecycle with
assets/data-lifecycle-map-template.md. - Define controls in
assets/privacy-control-matrix-template.csv. - Validate decisions against
references/lawful-basis-and-minimization-rules.md. - Confirm operational feasibility for retention/deletion/rights handling.
- Publish controls and unresolved risks.
Quality Standard
- Every data element has explicit purpose and legal basis/authorization.
- Data collection is minimized and retention is bounded.
- User-rights handling is operationally executable.
Failure Conditions
- Stop when lawful basis or purpose limitation is undefined.
- Stop when retention/deletion controls cannot be enforced.
- Escalate when transfer safeguards or approvals are missing.