Going with the (data) flow, how Design could use data to build trust.

In the current digital landscape, where data is often referred to as the “new oil,” there is a growing need for responsible data practices among product managers, designers, and engineers. With the introduction of data regulations such as the General Data Protection Regulation (GDPR) in 2018 in Europe and increasing global privacy concerns, it is vital for companies to prioritize user privacy and rethink their approach to data collection.

In this opinion article, I want to explore the importance of using the bare minimum data necessary for a product or service to function, rather than massively collecting and potentially exploiting user information.

Global Privacy Concerns

The implementation of GDPR in Europe and similar privacy-focused regulations worldwide (LGPD in Brazil, DCIA in Canada or nFADP in Switzerland) signals a shift in the way companies handle user data. Users are becoming more aware of their digital rights and are increasingly concerned about how their personal information is collected, stored, and shared. Five years have now passed since the introduction of GDPR and privacy is deemed to be the top priority for future national action by Europeans, according to this survey made by the EU. This is further backed by the fact that 36% of Europeans consider that the EU does not protect their rights online very well and 30% think that more needs to be done on this topic.

So what could that mean for us, online makers? Can we do something instead of waiting for the EU to act? I think there are a few points that we could work on at our levels to make better use of our users data and change our attitude towards data collection.

Responsible Data Collection

We play a pivotal role in shaping how data is collected and used within our products. Instead of adopting a data-hungry approach, where we collect first and then thinking about what we can do with the data, teams should focus on identifying and collecting only the essential data required for the product to deliver its intended value to users. This not only respects user privacy but also reduces the risk of data breaches and misuse.

I noticed that designers are increasingly asked to think about data, whether it’s privacy or use of data — this goes in the right direction but it is often thought “after the fact” and not while designing a solution to a problem. The data we want to track to monitor if our design is a success or not should be defined before even opening Figma. Be aware that I am not talking about the project metrics, but the ones intrinsically linked to design — project metrics are determined by Project Managers most of the time. Engineers track data “by design”, this completes our product trinity of data awareness.

This awareness can quickly tend to “obsession” or at least excessive data collection. This poses several risks, including potential security vulnerabilities, increased regulatory scrutiny, and damage to the company’s reputation. A user being asked to share too many data, that doesn’t appear directly link to the use of the service while make users suspicious of the service and the brand. This was the case with Threads and Instagram, where the Threads app requested access to health data, financial information and more. Threads is also a good example of the temptation to monetize user data through third-party sales. By embracing a minimalistic approach to data collection, we can mitigate these risks and build stronger relationships with our user base.

User-Centric Design and Transparency

Product managers and designers should prioritize user-centric design principles that emphasize transparency and user control over their data. Stating “concerns about data privacy” as one of the requirements will help us build better products and will hold us accountable to our users when testing the solution with them.

Providing clear explanations of why certain data is collected and how it benefits their user experience help build trust. This is something important in my opinion, we should be able to provide our users with very clear, easy to understand information on why the data we use will help us provide them with a better product. Additionally, giving them granular control over their privacy settings empowers them to make informed decisions about the data they are willing to share with us. Because in the end, they should remain in control of what they want to share.

Educating Teams on Privacy Best Practices

To implement responsible data practices, our companies should invest in educating their teams about privacy best practices. This includes understanding the legal frameworks, staying informed about evolving privacy standards, and fostering a culture that prioritizes user privacy and data security. This was the case when I used to work for a bank, where regulations are primordial. These training sessions were mandatory for everyone in the company. However when I started to work in other industries, there were no training or information about data privacy — meaning that this crucial topic is left to anyone who’s already aware or interested in it. I think this is a missed opportunity for companies or agencies to empower their designers and help them build better products.

What about the data business?

Restricting data usage is quite challenging for data brokers, whose traditional business models rely on the abundance of user information. However, I think there’s an opportunity for them to pivot towards becoming champions of data protection and transparency. They could redefine their roles by actively engaging in responsible data practices, implementing stringent privacy measures, and providing transparent reports on their data-handling processes. By doing so, they not only adapt to changing privacy landscapes but also contribute positively to the ethical use of data. But of course, this is just a dream and they are still bound to making money by selling our data…

Final words

In conclusion, responsible data practices in product development are crucial in the current digital landscape. With the introduction of data regulations like GDPR and increasing global privacy concerns, companies must prioritize user privacy and rethink their approach to data collection, but it all starts with us, designers, product managers and engineers. Embracing a minimalistic approach to data collection, focusing on essential data only, not only respects user privacy but also reduces the risk of data breaches and misuse and will ultimately build trust with our users.

🧑‍💻 This story was originally posted on my website. 🆇 Follow me on X!