Map sensitive data through a feature | DevPrompt Lab

A privacy engineering prompt for identifying unnecessary data movement and control gaps across a feature.

Reusable content

Map each supplied data field across the feature lifecycle: collection, validation, storage, access, logs, analytics, exports, third-party sharing, retention, and deletion. Identify the purpose and actor at every step. Flag unnecessary collection, broad access, copies without retention rules, and deletion paths that leave references behind. Do not infer legal obligations; list questions for privacy counsel when needed. Recommend minimization and technical controls, then add tests that prove access and deletion behavior.

Feature: {{FEATURE}}

Data fields: {{DATA_FIELDS}}

Systems: {{SYSTEMS}}

Retention rules: {{RETENTION}}

How to use it

Use synthetic examples. Include only the fields and systems actually in scope.

Example

Project notes: private at rest, readable only by owner, excluded from telemetry, deleted with the account, and omitted from public exports.