Salesforce ArchitectureArchitect (Hardest)privacygdprdesign
Design privacy by design in Salesforce implementations
Real World Scenario
GDPR DPIA required before launching customer portal collecting behavioral analytics.
Expected Answer
• Data minimization collect only necessary fields
• Purpose limitation documented per data element
• Consent capture granular marketing vs service
• Privacy Impact Assessment before launch
• Erasure portability workflows engineered
• Pseudonymization analytics datasets
• DPO review gate architecture changes affecting privacy
Follow-Up Questions & Answers
Click to expand — each follow-up includes a direct, interview-ready answer
Direct answer: Data minimization collect only necessary fields Also consider: Purpose limitation documented per data element In practice: Consent capture granular marketing vs service Document the decision in an ADR and align with enterprise standards.
Architect Perspective
Privacy by design is architecture requirement in EU and increasingly global standard.