Agile projects need agile privacy advice.
If your project is in the early stages, it may benefit from integrated privacy advice, delivered early and often during ideation and design sprints, rather than the more formal, long-form analysis and advice contained in a traditional PIA Report. This approach to privacy advice can help shape the outcomes of the project early, by incorporating privacy considerations into project design from the very beginning. An embedded privacy advisor can also share learnings with your project team about how to apply Privacy Design Strategies in future projects.
Salinger Privacy can work with you to tailor the advisory approach to meet the specific needs and timeline of your project. For example, integrated Privacy by Design advice might involve active participation in a four week design and development sprint, including design workshops, stakeholder concept ideation and validation sessions, playback sessions, technical concept design sessions, and stand up meetings. Our advice can include ad hoc verbal advice, regular status reports, and a briefing paper at the end of the sprint, containing a summary of the privacy analysis and recommendations provided during the engagement.
Some clients may wish to combine the above approach with a PIA. In these cases, participation in the design and development sprint meetings would contribute to the information gathering phase of the PIA, along with one-on-one interviews and assessment of relevant documentation. The PIA Report would document the ad-hoc engagement through the early design stage and any resulting privacy-related design decisions already taken, as well as specific recommendations to mitigate privacy risks, and ensure privacy law compliance.
Salinger Privacy has participated in project ideation and design sprints for clients including:
- Service NSW – on a four-week discovery and ideation process, to offer advice on how best to implement Privacy by Design principles to shape the plans for a ‘copy feature’ for the NSW Digital Driver Licence
- Super Retail Group – on a project affecting customer loyalty programs across four leading retail brands
- Queensland Department of Child Safety, Youth and Women and the Department of Youth Justice – development of an Information Privacy Strategy and Approach for the Unify Program to develop a coordinated client management system for use by both departments
- NSW Department of Education – on the design of a curated data layer for the Thrive Program, a multi-year research-in-action program aimed at creating the conditions that support all NSW students to thrive
- NSW Department of Customer Service – on the design stage of a Stata Hub solution to support a number of reforms across the construction industry
We can also provide Privacy by Design workshops to help train your product development teams. See this article, in which one of our clients spoke publicly about the role played by our PbD workshops in their organisational mindset shift.
