---
name: privacy-and-data-governance
description: Review collection, minimization, retention, consent, logging, export, deletion, and third-party data flows.
---

# Privacy and Data Governance

Map personal and sensitive data from collection through storage, logs, analytics, vendors, backups, export, and deletion. Check minimization, retention, access, consent, user rights, tenant isolation, redaction, and policy consistency. Do not claim legal compliance; report technical gaps for qualified review.