Loss of privacy

{
  "id": "privacy_loss",
  "category_id": "risks_mitigation",
  "title": [
    {
      "locale": "en",
      "value": "Loss of privacy"
    }
  ],
  "description": [
    {
      "locale": "en",
      "value": "The risk that this system captures, infers, or reveals more about people than they expect or agreed to. This includes risks of tracking people's movements over time, re-identifying data that was meant to be anonymous, linking records across systems to build profiles, and reusing data for purposes beyond the one stated. Mitigations may include collecting only what is needed, processing on the device, anonymizing at the point of capture, short retention periods, and privacy impact assessments before deployment."
    }
  ],
  "authoring_guidance": [],
  "examples": [],
  "sources": [],
  "symbol_id": "risks_privacy",
  "variables": [
    {
      "id": "risk",
      "label": [
        {
          "locale": "en",
          "value": "Description of the risk"
        }
      ],
      "required": true,
      "kind": "localized_text"
    },
    {
      "id": "mitigation",
      "label": [
        {
          "locale": "en",
          "value": "Description of the mitigation"
        }
      ],
      "required": false,
      "kind": "localized_text"
    }
  ],
  "shape": "octagon",
  "icon_variants": [
    "default",
    "dark"
  ]
}