“We have the data flow diagram for which you make a mapping table for each of the landing categories and then you systematically go over each of the cells of the table and look at the Linden knowledge, Linden threat trees, to determine whether for that specific DFD element, a privacy threat occurs.”

Transcript evidence from Kim Wuyts — Privacy Threat Modeling.