{
  "id": "workflow:mobile-app-privacy-review",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-deeper-domains.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Mobile App Privacy Review",
    "workflowKind": "governance",
    "triggerType": "event-driven",
    "typicalCadence": "per-release",
    "complexity": "cross-team",
    "description": "Reviews mobile application privacy practices before release -- auditing\nruntime permission requests against actual feature usage to eliminate\nover-permissioning, analyzing network traffic for undisclosed data\ncollection by third-party SDKs, validating app-store\nprivacy-nutrition-label accuracy against actual data-handling practices,\nreviewing App Tracking Transparency and GDPR consent-flow\nimplementations, assessing data-retention policies for locally stored\nuser data, verifying data-deletion API compliance with right-to-erasure\nrequirements, and testing privacy controls across device types and OS\nversions. Produces privacy review report and app-store privacy-label\nupdate. Excludes general functional QA.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "role:staff-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "role:product-designer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "skill-area:ios-native",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "skill-area:android-native",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "domain:mobile",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "domain:security",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "domain:legal",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "responsibility:threat-modeling",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "org-unit:frontend-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:mobile-app-privacy-review",
      "to": "org-unit:legal-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}