Compliance, Security, and Risk Management in UX Design

What if I told you there was a better way to design digital solutions without over engineering and over-designing a tool

Yinnette Olivo

posted on 04/09/2025

Compliance, Security, and Risk Management in UX Design

About Me

Yinnette Olivo

Discover’s recent refocus on compliance, security, and risk management has sparked a collective effort within the Design and UX community to underscore the significance of these considerations. But how exactly do compliance and security weave into our everyday design processes?

Differentiating Design Categories and Compliance

Print vs. Digital Design

Firstly, let’s distinguish between two main design categories: Print Design and Digital Design.

Print Design specialists create materials like brochures, posters, and other physical marketing collateral, ensuring visual elements align with brand identity and compliance standards.

On the other hand, Digital Design specialists craft digital user interfaces, software, SaaS products, websites, mobile apps, and hybrid applications. Due to the dynamic nature of digital platforms, considerations for compliance, security, and risk management are essential.

Clarifying Design Thinking

It’s important to differentiate these discussions from “Design Thinking,” which is a methodology used across various fields like product management, operations, and engineering. Here, we’re specifically addressing visual design and compliance standards.

The Necessity of Compliance Standards

At large enterprises like Discover, AT&T, and Walmart, adhering to Business Technology (BT) standards, policies, risk management, and compliance requirements is mandatory. Neglecting risk management when creating digital assets can lead to serious repercussions, beyond financial loss, including damage to reputation and public trust.

In the realm of design, our mission is not merely creating visually appealing products but ensuring these creations align strictly with organizational standards, digital security, and compliance requirements.

Personal Insights from Early Career Experience

Early Lessons Learned

Let me illustrate with a personal story. Early in my career at a local newspaper, I transitioned from a developer to a junior graphic designer. Using Photoshop and Quark (a predecessor to Adobe InDesign), I created ads intended for print and online publication.

The Costly Mistake

A significant assignment involved designing an ad for a popular eyewear retailer. With excitement, I crafted an enticing offer: “Buy-one-get-one-free” eyeglasses. However, after multiple editorial reviews—from department editors, sales teams, and print technicians—a crucial error slipped through. The published ad mistakenly promoted “Buy one, get one free sunglasses” instead of eyeglasses.

Impact and Consequences

This small oversight had a huge financial impact, causing the retailer to lose over $20,000. They had to honor the mistaken offer, handing out costly prescription sunglasses instead. My employer had to provide substantial free advertising to compensate the client, illustrating how even minor design mistakes can lead to significant business and reputational damage.

The Importance of Rigorous Controls

Safeguarding Through Controls

This experience highlights why rigorous design controls are indispensable. Proper checks and balances—such as multiple editorial reviews and meticulous attention to details—help prevent costly errors and protect a company’s reputation.

Learning from Real-World Examples

High-profile cases like Gap’s controversial logo change, Netflix’s Tiger King branding lawsuit, and Balenciaga’s problematic ads demonstrate how seemingly minor errors by designers can escalate into major legal and PR crises. Even seemingly trivial details, such as product disclaimers (e.g., McDonald’s hot coffee lawsuit), emphasize the critical need for clear, compliant communication in design.

Best Practices for Secure and Compliant Design

Detail-Oriented Approach

Our role demands careful attention to compliance at every step:

  • Approved Assets: Use legally approved fonts, stock images, and pre-approved design tools.
  • Comprehensive Vetting: All digital assets must be thoroughly vetted to ensure they align with company values and compliance requirements.

Communication and Coordination

Designers should work closely with internal communications and creative teams. Even activities like sharing designs publicly or entering design competitions require prior approval. This ensures assets are legitimate and protects against accusations of misuse or misrepresentation.

Encouraging Proactive Involvement

Leveraging Community and Resources

When sourcing ideas or images, recall the eyewear ad incident—a simple mistake can create significant risks. Utilize approved company resources available through digital workspace hubs.

Participate actively in your organization’s Design and BT meetups to help shape standards and policies. Your insights can aid in building comprehensive resource hubs, providing designers easy access to guidelines and compliant resources.

Your Role and Responsibility

If you have questions or suggestions, proactively communicate with your creative or UX design teams. Your involvement is crucial, not only for safeguarding the company but also for your professional growth. By adhering to best practices and rigorous compliance standards, you protect customers, secure your organization’s reputation, and ensure ongoing success.

Remember, compliance and risk management aren’t merely procedural—they’re fundamental aspects of our responsibility as designers.

Exploring creative insights and unlocking innovative ideas.

Discover a curated space of transformative ideas, forward-thinking strategies, and compelling insights that shape the future of user experience

Yinnette Olivo

posted on 04/09/2025