Certifications

Facebook
PROJECT

FTC Certification

Meta

Review and legally certify all issues associated to identified Safeguards through multiple levels of leadership including the CFO and CEO.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership. It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next. Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter. What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of Facebook's software to be legally certified by leadership and delivered to the FTC.

RESPONSIBILITIES

Product Designer
Including: Information Architecture, User Research, Visual Design, Interaction Design, Prototyping

RESULT

The goal is to deliver a MVP by Q2 that facilitates successful certification by leadership including Mark Zuckerberg.

STATUS

Work in progress

REQUIREMENTS

PROJECT PROFILE

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

PROCESS DIAGRAM

PROCESS DIAGRAM

Here's a rough diagram the team has been using to see the different steps in the certification process, what some of user actions are, and an approximate timeline of the events from start to finish.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

ITERATIONS

ITERATIONS

This product is going through many iterations as we figure out the process for each user. Here are a few other concepts I proposed along the way (click the image to see more). Everything below represents the current design.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

USER LANDING

USER LANDING

While the user's entry point of the certification process would either be a link in an email or a card in Workplace that would take them directly to the form, there still needs to be a page that has the ability to contain pending or historical certifications.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

CERTIFICATION LANDING

CERTIFICATION LANDING

I've tried various variations on this them, but this has been the most successful in terms of setting the stage for the user.

I've focused the modal on a few key bits of information as best as possible. There is the certification type, due date, point of contact, process steps, and a CTA to begin.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

CONFIRMATION PAGE

CONFIRMATION PAGE

The first step in the process for the user will be to review what has come before them to determine if they agree, disagree, or need to take action like adding a comment.

Here, each row/card has some key info about the object (Safeguard) in the header and then in a secondary attributes section below, and then lastly a way for them to review the details and take action.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

REVIEW DRAWER

REVIEW DRAWER

When the "Review" CTA is clicked by the user, a drawer is revealed with much more info about the object.

There are 3 sections to this drawer. First there's the main details at the top, second there is a section for "Issues", basically problems with the Safeguard, thirdly there is a section for the user to add a comment.

The user is able to verify the Safeguard should everything be working correctly, or report it as problematic if necessary.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

CONFIRMATION PAGE

CONFIRMATION PAGE

This is simply an example of the confirmation page after the user has taken action on the first two objects (Safeguards).

They are able to edit their work or move on to other Safeguards and ultimately the legal part of the process.

OVERVIEW

As an extension of the Risk Management software and effort, Facebook is creating a process by which the resolutions to identified Risks are verified and then legally certified at different levels of leadership.

It's a kind of relay race, where each privacy team goes through these certification steps in parallel, each level handing off their blessing to the next.

Ultimately, Mark Zuckerberg gives his final certification and then this entire package of work is delivered to the FTC. This happens each quarter.

What we see here is only a small excerpt of the whole effort. A single person's work (Safeguard owner) to certify their part of the whole.

STATS

  • Duration - 3+ months
  • Team - 1 designer (myself), 10 engineers, 1 EPM
  • Context - Web
  • Tools - Proprietary interactive prototype tool
  • Deliverables - Interactive prototypes
  • Users - Product and compliance owners across multiple teams, executive leadership
  • Impact - Enable Facebook to legally certify to the US government that they are mitigating any risks in their software or practices.

PROBLEM

Create an in-house solution that allows the collection of effectiveness status at various levels of all of Facebook's software to be legally certified and delivered to the FTC.

REQUIREMENTS

  • Review effectiveness of Safeguards
  • Legally certify their state.
  • Provide ways for each level to gather more context or get help if necessary.

CERTIFICATION PAGE

CERTIFCATION PAGE

Once each item has been blessed during confirmation, they can finally land on the page for the legal document. Here there are some quick instructions, but mostly they just have to answer a few questions and use the big CTA at the bottom to apply an e-signature/certification.