Code audits should be concluded before the launch, after all code for a feature is complete. This practice ensures that the entire codebase has been thoroughly reviewed and tested for security vulnerabilities and compliance with privacy standards before it is deployed to production. Conducting a comprehensive audit at this stage helps identify and address any issues that could compromise the integrity, security, or privacy of the system. This approach aligns with best practices in software development and is supported by guidelines from the IAPP and other industry standards, which recommend finalizing code audits as part of the pre-launch quality assurance process.

Privacy by Design (PbD) Integration: Ensuring that IT projects follow PbD principles requires a comprehensive approach embedded throughout the development lifecycle.
Technical Privacy Framework: Developing a technical privacy framework that integrates with the development lifecycle is crucial. This framework provides structured guidance and tools for implementing privacy controls and processes from the initial design to the final deployment.
Lifecycle Integration: By integrating privacy into every phase of the development lifecycle (requirements, design, implementation, testing, and maintenance), privacy concerns are addressed proactively rather than reactively.
Reference: The IAPP documentation on Privacy by Design emphasizes the importance of integrating privacy into the system development lifecycle to ensure ongoing and consistent protection of personal data.

The OECD privacy protection principle that encourages an organization to obtain an individual's consent before transferring personal information is individual participation. This principle asserts that individuals should have the right to know about the collection and use of their personal data, and to consent to its transfer.
It emphasizes transparency and individual control over personal information (IAPP, Certified Information Privacy Technologist (CIPT) materials).

Secret sharing is the technique that describes the use of encryption where encryption keys are divided into parts that can then be used to recover a full encryption key. This method ensures that no single part of the key is sufficient to decrypt the data, thereby enhancing security. Secret sharing schemes are detailed in the IAPP's CIPT materials under cryptographic techniques, highlighting their application in securing sensitive information and managing encryption keys.