{"version":"0.2.0","built_at":"2026-10-10T20:58:14.188Z","license":"CC BY 4.0 © Mike Reams","canonical":"https://catalog.mikereams.com","capability":{"id":"BC-1270.50","name":"Privacy Engineering","level":2,"parent_id":"BC-1270","l1_id":"BC-1270","industry":"software","macro_id":null,"path":["Trust & Compliance Assurance","Privacy Engineering"],"description":"Design the product so that it handles personal data the way the company promised — minimizing what it keeps, honoring individual rights and documenting data flows that regulators and customers can inspect.","aliases":["Privacy by Design","Data Protection Engineering","Subprocessor Management"],"in_scope":["Privacy impact assessment of features","Data flow mapping and subprocessor inventory","Data subject rights handling inside the product","Encryption and key management commitments to customers"],"out_of_scope":["Privacy legal interpretation and regulatory filings (see BC-140 and BC-150)","Tenant residency enforcement (see BC-1250)"],"csdm_note":null,"status":"active","successor_id":null,"child_ids":["BC-1270.50.10","BC-1270.50.20","BC-1270.50.30","BC-1270.50.40"]},"crosswalk":{"realized_by":[],"used_in":[],"patterns":[],"stacks":[],"books":[]},"ancestors":[{"id":"BC-1270","name":"Trust & Compliance Assurance","level":1}],"children":[{"id":"BC-1270.50.10","name":"Privacy Impact Assessment","level":3,"child_count":0},{"id":"BC-1270.50.20","name":"Data Flow & Subprocessor Mapping","level":3,"child_count":0},{"id":"BC-1270.50.30","name":"Data Subject Rights Fulfillment","level":3,"child_count":0},{"id":"BC-1270.50.40","name":"Encryption & Key Management Commitments","level":3,"child_count":0}]}