PRIVACY / 15-minute exercise

Audit the data in a verification flow

Map the fields you request and the records you retain.

REAL-WORLD SCENARIO

Work through the decision.

A community platform asks members to prove they are present when making a sensitive change.

Your objective

Remove unnecessary fields from a proposed trust check.

Deliverable: A data inventory covering purpose, retention, access, and deletion.

Activity steps

0 of 3 steps complete

01List input fields and events.02Assign a purpose to each field.03Remove unnecessary collection and set retention periods.Your working notes

Your work is saved on this device only.

Worked example

Store a challenge ID, action binding, result status, and short expiry. Do not collect an identity document unless a separate requirement justifies it.

Quality check

Justify each collected field.
Separate operational records from personal information.
Record a practical retention rule.

GO DEEPER

Continue with the source guide.

The companion guide provides the reasoning and trade-offs behind the exercise.

Read the companion guide