Privacy by Design

Data protection by design aims to build data protection and privacy into the design of processing operations and information systems, in order to comply with data protection principles. Organisations are required to take into account the protection of the rights of individuals, both before and during their processing activities, by implementing the appropriate technical and organisation measures to ensure that they fulfil their data protection obligations. To ensure that this key principle of the General Data Protection Regulation is applied in practice, the EDPS will issue guidance documents.