privacy-checklisted

# Privacy Check Skill Privacy by Design assessment. ## Workflow ### 7 Foundational Principles (Cavoukian) 1. **Proactive not Reactive**: Are privacy measures built in from the start? - [ ] Privacy considered in design phase, not bolted on - [ ] Risks identified before implementation 2. **Privacy as Default**: Is the most private option the default? - [ ] Data collection opt-in, not opt-out - [ ] Minimum data collected by default - [ ] Sharing disabled by default 3. **Privacy Embedded in Design**: Is privacy integral to the system? - [ ] Privacy controls are core features, not add-ons - [ ] Architecture supports data minimization 4. **Positive-Sum, not Zero-Sum** (originally "Full Functionality"): Privacy without trade-offs? - [ ] Privacy features don't degrade user experience - [ ] Not a false choice between privacy and functionality - [ ] Avoid false dichotomies: privacy vs. security, privacy vs. business value 5. **End-to-End Security**: Data protected throughout its lifecycle? - [ ] Encryption at rest and in transit - [ ] Secure deletion when no longer needed - [ ] Access controls throughout the data lifecycle 6. **Visibility and Transparency**: Is data processing transparent? - [ ] Users know what data is collected and why - [ ] Processing purposes documented and communicated - [ ] Third-party sharing disclosed 7. **Respect for User Privacy**: Are user interests centered? - [ ] Users can access their data - [