Absolutely, I've seen great work on this (thinking of you @fran_mady!). But I have been wondering if privacy shouldn't formally be made a product function, with the compliance team one of the stakeholders. It might be worth a Blog Post™.
♥ 3