Data Privacy By Design

A project-based course applying Privacy by Design (PbD) principles to a real-world app concept — TravelSafe — a travel safety application. Work covers GDPR compliance, privacy policy writing, data anonymisation, de-identification, and user consent design, completed as part of the EPITA MS programme.

Structure

Data-Privacy-By-Design/
├── travelsafe-project/    ← Complete TravelSafe app privacy deliverables
└── lesson-activities/     ← Lesson-by-lesson project section submissions

---

Project: TravelSafe — Privacy by Design Application

TravelSafe is a travel safety app designed from the ground up with privacy as a core principle. All documents follow GDPR requirements and the 7 Foundational Principles of Privacy by Design (Ann Cavoukian).

File	Description
final-presentation.pptx	Final project presentation
privacy-policy.docx	Full GDPR-compliant privacy policy
terms-of-use.docx	Terms of use document
user-consent-screenshot.png	UI screenshot showing user consent flow
travelsafe-anonymized.csv	Anonymised dataset used in the project
travelsafe.deid	De-identification configuration file
travelsafe-report.pdf	Full project report

---

Lesson Activities

Progressive project build across 3 lessons, each covering specific GDPR sections:

File	Sections Covered
lesson-01-activities.docx	Activities 01–04: PbD foundations and data mapping
lesson-01-project-sections.docx	Project Sections 01–03: Data inventory, purpose limitation, data minimisation
lesson-02-project-sections.docx	Project Sections 04–05: Consent management, data subject rights
lesson-03-project-sections.docx	Project Sections 06–07: Data retention, security measures

---

Topics Covered

• Privacy by Design — 7 foundational principles (Cavoukian)
• GDPR compliance — lawful basis, data subject rights, retention policies
• Privacy Policy writing — purpose, data collected, sharing, user rights
• Terms of Use — user obligations, liability, scope of service
• User Consent — informed consent UI, opt-in/opt-out design
• Data Anonymisation — techniques to remove PII from datasets
• De-identification — using ARX/similar tools (.deid configuration)

Author

Ganpat Patel EPITA MS — Semester 2 | Data Privacy By Design