Chapter 15
Data Protection by Design and by Default
IN THIS CHAPTER
Integrating data protection into your business systems
Understanding what is meant by data protection by design and by default
Conducting a Data Protection Impact Assessment
Hiring a Data Protection Officer
The new obligations introduced by the GDPR include the requirement to implement data protection principles that safeguard individuals’ rights. This is known as data protection by design and by default. What this essentially means is that you consider data protection and privacy upfront in order to integrate protection into your processing activities effectively— starting with the design stage and continuing throughout the whole life cycle. The idea is to take a preventative approach in which you proactively anticipate privacy issues and risks before they happen.
Previously known as privacy by design, this concept of data protection by design and by default is not a new one. Many organizations have implemented this approach as a matter of good practice, but the GDPR formalizes these requirements.
This chapter ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access