O3.16 Embed strong privacy standards from the start and integrate these into design and processes

Principle

O3: Ensure data privacy by design

Risk

Lifecycle

L2: Strategy & Design

Practices

Develop and enforce privacy policies that ensure data protection is built into all systems and processes from the beginning;

Design systems with default privacy settings that automatically protect user data without requiring user intervention;

Ensure systems default to privacy, include full functionality without compromising security, and maintain protections throughout the data lifecycle.

Resources

Case Study

Resources