Privacy by Design

Privacy by design means building privacy protection into a digital technology from the beginning, rather than adding it after problems arise. It integrates privacy into system architecture, default settings and organisational practices throughout the data lifecycle, from collection and use to retention and deletion.

Foundational principles

Privacy by design follows seven foundational principles, which make privacy a continuing design responsibility rather than a one-time compliance exercise.

• Proactive, not reactive: Developers should anticipate and prevent privacy risks before harm occurs.
• Privacy as the default: Personal information should receive protection automatically, without requiring users to change settings or take additional action.
• Privacy should be embedded in the design and operation of systems, rather than treated as an optional addition.
• Full functionality means seeking solutions that achieve both privacy and legitimate system objectives, rather than assuming that one must always be sacrificed.
• End-to-end security should protect information throughout its lifecycle, including secure disposal when it is no longer required.
• Visibility and transparency mean that practices should be understandable and open to independent verification.
• Respect for user privacy requires user-centred design, clear information and accessible privacy controls.

How developers put it into practice

Developers translate these principles into technical choices and organisational procedures before deployment, and review them as the technology changes.

• Data minimisation means collecting and processing only the personal information needed for a specified purpose.
• Privacy-risk assessments identify how data processing could affect individuals and help developers select safeguards early.
• Privacy-protective defaults can disable unnecessary tracking and limit the sharing of personal information unless the user chooses otherwise.
• Access controls and encryption help protect data against unauthorised access, while retention limits and deletion procedures reduce unnecessary storage.
• Clear notices and usable controls help people understand and manage how their information is processed.

Why it matters for digital technologies

Privacy is broader than cybersecurity: a system may securely store information yet collect excessive data or use it in ways that intrude on individuals. Privacy by design therefore addresses the purposes and consequences of processing, not merely protection against breaches. It is particularly relevant to connected devices and AI systems, where data collection and analysis can be extensive or difficult for users to observe.

• It supports user trust by making privacy protection part of ordinary system operation rather than placing the entire burden on individuals.