The Privacy Review
The privacy review should be viewed as the mitigation process for unresolved problems found during the privacy analysis of each component. If no problems were found during the privacy analysis of each component, the review document will have no issues associated with it. However, the formal review should still be held to make sure everyone is in agreement with the findings.
Starting the Privacy Review
So where does one get started with a privacy review? For legacy products, you will want to perform a privacy review of each released component to see where you are before starting the next development cycle. List each of the privacy risks along with proposed solutions ...