A guide to Data Protection by Design!!

[yagmursahin]

Thank you, Richard.
Enjoyable, informative.

Key takeaways:

"Data protection by design" is a conceptual stage, building everything from the ground with the privacy and data protection mindset. It can be anything.

-Developing new IT systems,
-developing organisational policies,
-physical design.

According to ICO, "You have to integrate or 'bake in' data protection into your processing activities and business practices."

"Data protection by default" means specifying the data, informing the individuals, and processing their data only for the need for your purpose.

It is basically collecting a minimum amount of information and asking yourself;
-Do I need to know who those people are to achieve my purpose?
Do ı need unique identifiers?
And so forth.

[alexandrud.]

Hello, Richard!
I’m a DPO in Romania and I’ve just discovered you.

In concreto, to address this issue in a straightforward and pragmatic way, I would mention that it is important to respect the principles relating to the processing of personal data and to incorporate them into processing activities before they are initiated. When we comply with Article 5 of the GDPR, we will also implicitly comply with Article 25 of the GDPR.

The principles related to the processing of personal data must be built into the data protection safeguards by design and by default.

Anyway, you have a good content, great info, European Data Protection Board is the perfect source of information by reporting to GDPR.