Privacy as a Decision Capability

Privacy functions have become very good at producing evidence that the work was done, and much less good at showing that a decision came out any different because they were there.

Organisations make decisions that affect people.

Privacy as a decision capability is the organisational ability to:

  1. Recognise the privacy implications
  2. Reason about privacy risk and potential harm
  3. Bring together the disciplines needed for the decision
  4. Change the decision, its conditions or its outcome where necessary

The foundational paper

The paper argues that privacy is a decision capability: an organisation’s ability to recognise when decisions that affect people create privacy risk, understand the potential harm, bring the right disciplines together early enough, and change the decision or its outcome. It also explains how the Compliance Loop pulls privacy back toward evidence of activity rather than evidence that decisions changed.

Read it in full →

The thesis in depth

Five essays develop the component arguments behind Privacy as a Decision Capability.

  1. A Framework Is Not an Operating Model

    Adoption isn't behaviour change. The test is whether risk decisions actually differ.

    Perspective · Privacy Strategy · June 2026

  2. AI Governance Is the Stress Test for Your Operating Model

    AI is where you find out whether the operating model actually reaches the work.

    Perspective · AI Governance · June 2026

  3. Scrutiny Is Not Accountability

    Independent challenge matters, but it cannot make the business own a privacy, data or AI decision it was never required to make properly.

    Perspective · Privacy Strategy · July 2026

  4. Privacy Training Does Not Work If the Right People Are Not in the Room

    Privacy training can improve knowledge without building the judgement people need to shape a consequential decision together.

    Perspective · Privacy Strategy · July 2026

  5. Why Boards Need to Rehearse AI Governance Decisions

    Board papers can show that AI governance exists. Rehearsal shows whether management can make, challenge and evidence an AI decision before the organisation is already committed.

    Perspective · Board Governance · August 2026

Related work

Selected perspectives, research and case analyses that extend, apply or test the argument without forming part of the five-essay series.