how do we help product teams make good
decisions because because privacy
engineering to me begins with the idea
and so and the idea then has someone has
to decide yes that's an idea we should
go with so how do we help people make
good decisions so when I think about
helping product teams make good
decisions the first thing I think about
is aligning their incentives right where
you say where you go and explain to the
to a product team but they want to make
build a great product and you can you
talk to them about how great privacy is
something that they have to have in
order to have a great product a lot of
teams I work with start out there some
of them we go and explain this and
they're like oh I hadn't really thought
about that that's really important so
that once they have that desire and from
a compliance perspective it's good that
there's that there are also you know
checks in the process and checks in the
system but once you have that desire
then they have to actually know how to
do it so you need to be able to go and
teach them you need to be able to go and
help them whether that's written
material documentation or if you can get
it like if you can actually do this
infrastructure that makes doing the
right thing automatic if you can't do it
for everything right I don't I don't
know how to build a computer where I can
give it a give it a sentence and say is
this comprehensible to humans it is is
this sentence true about my system is it
true about the future product direction
right so there are a lot of places where
we have very human denominated values
that must be evaluated by humans so get
their lent incentives aligned get and
and and get them to understand how to do
it make it as easy as possible then I
think about metrics and I've been
spending a lot of time thinking about
metric perversity it's
a perverse metric is one where you can
make the metric move in the right
direction whichever one it is that you
want but in the real world the outcome
isn't what you want so if you if you say
oh I want to have more users sure I can
make you set it up so you have more
users but you doesn't necessarily you
mean you have more happy users it might
mean that what you have is a DDoS attack
so youyou really want to go and be
really careful about how you're
measuring things because people make
decisions based on on metrics and those
metrics may have a gap between between
the data they're showing and where they
are in the outside world
you