Privacy by Design is a proactive approach to protecting user privacy by embedding privacy into the design and architecture of IT systems and business practices from the outset. This method ensures that privacy is considered at every stage of development, making it an integral part of the product or service. The goal is to safeguard user data by default, reducing risks and enhancing trust.

The 7 Foundational Principles of Privacy by Design

1. Proactive, Not Reactive; Preventative, Not Remedial:
   Privacy by Design anticipates and prevents privacy issues before they occur, rather than addressing them after the fact.
2. Privacy as the Default Setting:
   Personal data is automatically protected in any IT system or business practice. No action is required from the user to safeguard their privacy.
3. Privacy Embedded into Design:
   Privacy is a core part of the design and architecture of systems, not an add-on or afterthought.
4. Full Functionality—Positive-Sum, Not Zero-Sum:
   Privacy by Design seeks to accommodate all legitimate interests and objectives, balancing privacy with functionality without trade-offs.
5. End-to-End Security—Full Lifecycle Protection:
   Strong security measures are integrated to protect data throughout its entire lifecycle, from collection to deletion.
6. Visibility and Transparency—Keep It Open:
   All stakeholders, including users, are assured that business practices and technologies operate according to stated promises and objectives. Systems are transparent and subject to independent verification.
7. Respect for User Privacy—Keep It User-Centric:
   Privacy by Design requires systems to be user-friendly and respectful of user privacy, offering strong privacy defaults, appropriate notice, and empowering user-friendly options.

OneTrust.com (Kadi Coult Wharton), The 7 Principles of Privacy by Design, 20.08.2024