GDPR - Privacy by Design & Risk

GDPR requires organisations to protect personal data, assess privacy risks and build data protection into systems and processes from the outset. 

Our privacy and threat-modelling games help teams identify risks to personal data, examine data flows, consider potential harms and agree appropriate mitigations, supporting activities such as privacy by design, DPIAs and security risk assessment. 

Other games strengthen privacy awareness and encourage better decision-making around the use of personal information.