Implementing Privacy by Design

A Privacy By Design element is not just a policy document. It is a philosophy. It has to percolate down from the top-most echelons of the organization. It has to be a complete design change and is applicable to Process, Technology and People.
Each set brings their own twists to the tale and is an important facet of embracing this.
1. The Security and Privacy aspects need to be looked at for all areas in the Application Stack. It is applied to COTS, Product in Design Stage, Product developed in the past, maybe in the last 6–10 years, product developed prior to 10 years - could be legacy products.
2. One consideration point here could be technology as well. e.g. Cloud, Container-based, newer technology-based products may have differing scales even if they are developed some years back. This needs to be considered while adopting the philosophy.