privacy-by-design

Design privacy protections into software before personal data collection begins.

41|5|Updated Sep 30, 2025
One-click install
npx skills add https://github.com/efekrbas/discord-hypesquad-manager --skill privacy-by-design-efekrbas
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: privacy-by-design
Source: https://github.com/efekrbas/discord-hypesquad-manager/tree/main/.agents/skills/privacy-by-design
Command: npx skills add https://github.com/efekrbas/discord-hypesquad-manager --skill privacy-by-design-efekrbas

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams design software that protects personal data from the start instead of adding privacy controls after launch. It reduces compliance risk, limits unnecessary data collection, and makes consent, retention, and user rights part of the core design.

Core Features & Use Cases

  • Data minimization: Identify only the fields and events that are truly necessary for the feature.
  • Consent and purpose limitation: Ensure optional collection, analytics, and third-party sharing happen only with explicit permission.
  • Security and retention: Apply encryption, access controls, logging hygiene, deletion policies, and backup-aware retention rules.
  • User rights support: Plan for access, correction, export, and erasure workflows from the beginning.
  • Use case: Review a signup flow, database schema, or analytics integration and rewrite it so the product collects less data, explains why it is collected, and provides a clear way to delete or export it.

Quick Start

Use the privacy-by-design skill to review this feature and tell me what personal data to remove, what consent is required, and how to add retention, deletion, and safe logging safeguards.

Frequently Asked Questions about privacy-by-design

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement data minimization in a new software feature?

Data minimization involves identifying only the truly necessary fields and events for your feature. You can review your product flows to strip away excessive personal data collection, ensuring compliance with GDPR and CCPA from day one.

What is privacy by design in software development?

Privacy by design means building data protections into software before personal data collection begins. It integrates consent, access control, purpose limitation, and safe logging into core architecture rather than adding them post-launch.

How do I plan GDPR user rights workflows for data access and erasure?

Planning GDPR user rights workflows requires defining clear paths for access, correction, export, and erasure. You must map these deletion and export processes into your database schema and backup retention rules from the start.

Does privacy by design work with existing analytics and third-party integrations?

Yes, privacy by design applies to analytics and third-party integrations. It ensures optional data collection and sharing happen only with explicit user consent, enforcing strict purpose limitation across all external API connections.

What's the best way to apply retention and deletion policies to user data?

Applying retention and deletion policies requires establishing backup-aware rules and logging hygiene. You must define data lifecycle limits, enforce encryption, and ensure deletion paths permanently remove personal data across all systems.

Why do I need consent and purpose limitation for optional data collection?

Consent and purpose limitation are required to ensure optional analytics and third-party sharing happen only with explicit permission. This prevents unnecessary tracking and aligns software flows with strict GDPR, CCPA, and LGPD compliance standards.