Though privacy by design is a concept that has been around since the ’90s, most recently, data protection by design and by default was introduced by EU lawmakers as a prominent part of the provisions of the GDPR. In this context, technical and organizational measures are mentioned that should aim to ensure that, by default, only personal data necessary for each specific purpose of the processing is processed. As the ePrivacy Regulation is being developed in the EU, which will also have a tremendous effect on the online environment, the fundamental question remains: What are the very settings that are, by default, private? Piotr Foitzik, CIPP/E, CIPP/US, CIPM, explores the topic in this how-to for The Privacy Advisor. 
Full Story