Privacy should primarily be a product design objective, with documentation as an outcome. Instead, privacy programs spend far too much time checking boxes in spreadsheets to complete surveys so that other privacy programs downstream can check boxes. twitter.com/robinberjon/st…