In the following paper I conduct a review of Privacy by Design-literature after the introduction of GDPR in 2018 and provide an overview of different existing privacy frameworks. I then expand on the literature within the field of one such privacy framework, namely privacy patterns. I develop and present two new patterns, i.e the polling pattern and the pub/sub pattern, as well as one dark privacy pattern, i.e. the observer pattern. I argue that these patterns are useful tools that can help inform the design of future, privacy-preserving online services.
These three patterns can be summarized in the following way. The polling pattern arises when a party, a, at certain intervals request information from a party, b. Either party can at any time decide to leave the information transaction. The pub/sub pattern describes a situation in which a party, a, sends information to an impartial party, b, who then emits this to all parties c_1,…,c_n, that have indicated their willingness to recieve this information. The observer pattern is characterized by any situation in which a party, a, discloses information to a party, b, so that b may take actions on behalf of a. This is usually done when b is providing some kind of service to a, that rests on the fact that b has been enabled to take these actions.

I use these three patterns to conceptually redesign two aspects of Danish news media, Zetland, in an attempt to show the practical application of the patterns. As evident from this redesign the patterns rely to a degree on infrastructual change and might presuppose the development of new serivices and applications. This may present challenges for individual companies, as one company cannot change an entire ecosystem. Furthermore, the current ecosystem lacks agreed upon standardization of privacy protocols, leaving companies with an impossible task of supporting all the different protocols. Building a privacy aware future will require re-shaping many of the building blocks with which the web is currently built. These patterns may serve as a useful guide when evaluating and sketching out these privacy protocols of the future.

I conclude by discussing the usefulness of these patterns, their position in the techstack and their relation to other privacy concepts found in the literature. I introduce and discuss the concept of direction in regards to the polling pattern, and argue for the adaptive capabilities of these patterns both as infrastructural tools and tools used by individuals and organisations.