5.18 Promote responsible data practices
Business Strategy And Product Management
Respect user data rights and manage data lifecycle through minimized collection, user control, portability, deletion, and content archiving.
Success Criteria
- Data practices:
Maintain publicly accessible privacy, legal, and policy documents in plain language and accessible formats. Follow strong data protection practices aligned with recognized international standards, apply stronger protections where risks to users are higher or safeguards are insufficient, and support good practices in privacy, accessibility, and sustainability through transparent data use and governance. - Data ownership:
Respect user data rights, including access, correction, deletion, opt-out, and data portability. Provide clear user controls to manage accounts, data, and subscriptions. Only collect and retain personal data for a defined purpose and for no longer than necessary. Provide data export in open, commonly used formats. Ensure that deletion and consent changes apply across all systems, including databases, derived datasets, backups, and caches, within a reasonable timeframe. - Outdated content:
Archive and delete outdated or otherwise expired product content and data via automated expiration dates and scheduled product audits. Publish the archiving schedule, ensuring a lightweight version of the old searchable content is maintained for those that may require it.