Privacy engineering and DPIA in practice
With privacy threat modelling, data flow maps, privacy-enhancing techniques and a thorough data protection impact assessment, you make a new product privacy-compliant at the design stage.
Level 401 · 16 lessons · 15 practice labs
Lessons
Privacy by design
- The seven principles of privacy by design and Article 25
- Writing privacy requirements
- Drawing a data flow map
- Quick task: a privacy review of a new feature
Threat modelling
- Privacy threat modelling with LINDDUN
- Privacy-enhancing technologies
- Consent and preference management systems
- Engineering deletion: backups, copies, logs
- Quick task: a LINDDUN model of an app
DPIA
- When a DPIA is required
- The DPIA method: description, necessity, risk, measures
- Scoring risk to people
- Prior consultation and records
- Quick task: a DPIA draft for a location-tracking feature
Finish
- Keeping a DPIA current and reassessing it
- Capstone: a full DPIA for a health app
Practice labs
- Match the principle to the design decision: Match ten design decisions to one of the seven principles of privacy by design.
- Write privacy requirements: Write eight testable privacy requirements for a loyalty card feature.
- A privacy review of a new feature: Review the design document of a shopping app's friend suggestion feature and write findings on defaults, minimisation and transparency.
- Mark the elements of a data flow: Mark the data source, process, store and recipient in a description of a sign-up process.
- Draw a data flow map: From a booking app's architecture notes, prepare a flow map as a text diagram showing data categories and trust boundaries.
- Find the undocumented flows: Compare an app's network request export with its data flow map and report third-party flows missing from the map.
- Place the threat in its LINDDUN category: Place twelve privacy threats under linking, identifying, non-repudiation, detecting, disclosure, unawareness or non-compliance.
- A LINDDUN model of an app: For each element in a running tracker's data flow map, write the applicable threats and one mitigation.
- Choose the privacy-enhancing technology: For six uses, choose with reasons among pseudonymisation, aggregation, differential privacy and on-device processing.
- What a consent record must hold: Check the fields of a consent record table and mark what fails to answer who, when, to which wording and through which channel.
- Find the copies deletion does not reach: From a system inventory, list the backup, cache, log and analytics copies that a deletion request does not reach.
- Write the deletion design: Write a deletion design covering backups, logs and processors with timings and a verification step.
- Spot the DPIA triggers: Mark the criteria that call for an impact assessment in ten project summaries.
- A DPIA draft for a location-tracking feature: Write the description, necessity, risks and measures sections for a courier driver location-tracking feature.
- Score the risk to people: Score eight risks of a health app by severity and likelihood of harm to people and state whether prior consultation is needed.
About this course
With privacy threat modelling, data flow maps, privacy-enhancing techniques and a thorough data protection impact assessment, you make a new product privacy-compliant at the design stage.
What you will learn
- Privacy by design
- Threat modelling
- DPIA
- Finish
Prerequisites
You should have practised the topics of the same path up to level 301.
Lab environment
Lessons run in your own Kali Linux terminal that opens in the browser. Nothing to install; the lab starts clean in every lesson.
Frequently asked questions
- Is this course right for my level?
- The course is at level 401; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.