Privacy DFD and Data Inventory

Produce Microsoft privacy compliance artifacts — a Mermaid Data Flow Diagram (DFD) and a Markdown data inventory table — for a service or system under privacy review.

When to Use

• Creating a new privacy DFD for a service
• Updating an existing DFD after architecture changes
• Building a data inventory table for privacy review
• Preparing 1CS privacy review artifacts
• Answering privacy review key questions (Who, What, Where, When, Why, How, AI/ML)
• Classifying data elements with Microsoft taxonomy

Outputs

1. Mermaid DFD (.mmd file) — a single flowchart LR showing all privacy-relevant data flows
2. Data Inventory Table (.md file) — a Markdown table listing every data element the service collects, processes, stores, or transmits

Procedure