10.5.1 · Skill in Governance and compliance
Privacy obligations
Legal duties around personal data, such as GDPR.
Privacy law sets rules for collecting, using, storing and deleting personal data. Data subject requests, such as export and deletion, need product features. Knowing the basics avoids building something that has to be redone.
Resources
3- docsStart herePrinciples of the GDPR ↗European Commission · 12 min
Lawfulness, purpose limitation, minimisation and the other principles every feature that touches personal data must respect.
- docsGo deeperObligations for businesses under the GDPR ↗European Commission · 12 min
What a company has to do in practice, from records and security to breach notification within 72 hours.
- docsGo deeperRespect individuals' rights (guide for small business) ↗European Data Protection Board · 20 min
Access, deletion, portability and the other requests your product has to be able to answer.
Tools
none yetTools for this topic are being researched.