IEEE 7002-2022

This standard defines requirements for a systems engineering process for privacy-oriented considerations regarding products, services, and systems utilizing employee, customer, or other external user’s personal data. It extends across the life cycle from policy through development, quality assurance, and value realization. It includes a use case and data model (including metadata). It applies to organizations and projects that are developing and deploying products, systems, processes, and applications that involve personal information. By providing specific procedures, diagrams, and checklists, this standard enables users to perform a conformity assessment on their specific privacy practices. Privacy impact assessments (PIAs) are described as a tool for identifying where privacy controls and measures are needed, and for confirming they are in place.