10.5 · Capability in Operations

Governance and compliance

Meeting legal and policy obligations around data, privacy and security, without slowing the product to a halt.

Map5 skills

Not startedLearningComfortable

5 skillsClick a hexagon to set your status

10.5.1Privacy obligationsLegal duties around personal data, such as GDPR.
10.5.2Consent managementAsking for and respecting users' choices about their data.
10.5.3Data governanceRules for who owns, accesses and retains which data.
10.5.4Security policiesThe organization's rules for keeping systems and data secure.
10.5.5Regulatory constraintsIndustry and regional rules the product must follow.

Mark all 5

Where to start

3 resources

docsStart here
Data protection explained ↗
European Commission · 2024 · 8 min
The GDPR in plain terms from the institution that wrote it.
docsStart here
Principles of the GDPR ↗
European Commission · 12 min
Lawfulness, purpose limitation, minimisation and the other principles every feature that touches personal data must respect.
docsStart here
Data protection basics (guide for small business) ↗
European Data Protection Board · 7 min
A short guide written for small companies, including when you need consent and when you do not.

0 tools

Tools for this topic are being researched.