Privacy is an intimately human concern. It is often surfaced to users in several ways, and how data flows out of a product can be critical to its commercial viability.
But do we task product people with handling it, as you'd expect?
You know we don't!
Instead of approaching privacy as a product concern, we let compliance lawyers run wild with it, often (though there are exceptions ;) with the detrimental effects we all see every day.
How can we fix this? I hope to help provide an answer!