Supporting evidence for the author's thesis: "So we’re adding a new process to our existing review system, in which every engineering project leader will be re

Supporting evidence for the author's thesis: "So we’re adding a new process to our existing review system, in which every engineering project leader will be required to maintain a privacy design document for each initiative they are working on. This document will record how user data is handled and will be reviewed regularly by managers, as well as by an independent internal audit team." This sounds awfully like the dreaded reviews (security, perf, globalization, internationalization, accessibility, etc.) at MSFT that gobbled up the time of PMs + devs. That's not to say that Google shouldn't have privacy design docs, just that they're an unfortunate consequence of scale. Quote from http://googleblog.blogspot.com/2010/10/creating-stronger-privacy-controls.html http://googleblog.blogspot.com/2010/10/creating-stronger-pri...