should we obsolete / merge contents of this document into others?

[npdoty]

I know a few years ago we tried to consolidate privacy guidance documents, and I think in practice we've obsoleted this document. Some parts of it are well-represented already in either the Questionnaire or in the ongoing Privacy Threat Model work. But it might also be worth checking over it again to see what should be retained for use elsewhere.

Then we could mark the README that this is a document no longer being maintained, but here are a couple places that current work is happening.