01
The necessary-information test
Before collecting information, ask: do we need it, who requires access, for how long, how is access controlled, and what happens when it is no longer necessary?
02
Layered privacy
High privacy requires multiple conditions: purposeful collection, least-privilege access, secure storage, transparent handling, appropriate retention, and responsible deletion. One password is not a privacy architecture.
03
Privacy as luxury
Discretion is not an obstacle to service. It is part of service. The best private technology can feel like calm, relevance, simplicity, and trust rather than surveillance.