privacy-check

name	privacy-check
title	Privacy Check Skill
description	Use to assess Privacy by Design compliance and GDPR/data protection alignment for a feature or system.
author	haabe
author_url	https://github.com/haabe/mycelium/tree/main/plugins/mycelium/skills/privacy-check
license	MIT
version	0.1.0
execution_mode	open
jurisdiction	general
practice	data-protection
language	en

Privacy Check Skill

Privacy by Design assessment.

Workflow

7 Foundational Principles (Cavoukian)

1. Proactive not Reactive: Are privacy measures built in from the start?

   • Privacy considered in design phase, not bolted on
   • Risks identified before implementation

2. Privacy as Default: Is the most private option the default?

   • Data collection opt-in, not opt-out
   • Minimum data collected by default
   • Sharing disabled by default

3. Privacy Embedded in Design: Is privacy integral to the system?

   • Privacy controls are core features, not add-ons
   • Architecture supports data minimization

4. Positive-Sum, not Zero-Sum (originally "Full Functionality"): Privacy without trade-offs?

   • Privacy features don't degrade user experience
   • Not a false choice between privacy and functionality
   • Avoid false dichotomies: privacy vs. security, privacy vs. business value

5. End-to-End Security: Data protected throughout its lifecycle?

   • Encryption at rest and in transit
   • Secure deletion when no longer needed
   • Access controls throughout the data lifecycle

6. Visibility and Transparency: Is data processing transparent?

   • Users know what data is collected and why
   • Processing purposes documented and communicated