Proactive not Reactive; Preventative not Remedial:

• Anticipates and aim to prevents privacy invasive events before they happen.

Privacy as the Default Setting:

All privacy matters are built in to the system or are process driven.

• Purpose specification
• Collection limitation
• Data minimisation
• Use, retention, and disclosure limitation

Example:

If it is appropriate to offer a privacy setting, then the default position for each individual privacy setting should be ‘high privacy’.

In April 2021, Apple enhanced a privacy setting feature on iOS 14 and iPadOS 14.  Third-party applications are now required to get users’ permission before tracking them or their devices across apps and websites owned by other companies for targeted ads or ad measurement purposes, or to share  data with data brokers.

This ‘new’ feature has not exactly change the level of control offered to users, rather it has simply used a pre-existing but obscure feature in the phone settings and forced it centre stage. The aim is to ensure that the user is given an option and the requesting consent for specific processing is not by-passed. This is a good demonstration of Data Protection by Default.

Privacy Embedded into Design:

• Build privacy protections into the design and architecture
  of IT systems and business practices from the outset
• Not “bolted on” or as an afterthought

The result is that:

• Privacy becomes an essential component of the core functionality being delivered
• Privacy is integral to the system, without diminishing
  functionality

Full Functionality – Positive-Sum, not Zero-Sum:

• Privacy by Design seeks to accommodate all legitimate interests and objectives avoiding unnecessary trade-offs.
• Designers should develop creative win-win solutions and avoid the
  pretence of false dichotomies (such as privacy vs. security), demonstrating that it is possible to have both.

End-to-End Security – Full Lifecycle Protection:

• Full Lifecycle Privacy Protection Privacy is built in design, before the system is set in motion, and it must be guaranteed throughout the life cycle of the data. Information security involves the confidentiality, integrity, availability and resilience of the systems that store it
• Ensure cradle to grave, secure lifecycle management of information, end to end
• Ensure that all data is securely retained, and then securely destroyed at the end of the process, in a timely fashion

Visibility and Transparency – Keep it Open:

(Accountability, Openness and Compliance)

• Aim to assure all stakeholders that whatever the business practice or technology involved
• Principle of “trust and verify” applies. Component parts and operations remain visible and transparent, to users and providers alike.
• Operating according to the stated promises and objectives, subject to independent verification

Enforcement Action

The Information Commissioner’s Office (ICO) issued Equifax Ltd with a £500,000 fine for failing to protect the personal information of up to 15 million UK citizens during a cyber attack in 2017.

The ICO investigation found that, although the information systems in the US were compromised, Equifax Ltd was responsible for the personal information of its UK customers. The UK arm of the company failed to take appropriate steps to ensure its American parent Equifax Inc, which was processing the data on its behalf, was protecting the information.

According to the ICO, Equifax Ltd received the highest fine possible under the 1998 legislation because of the number of victims, the type of data at risk and because it had no excuse for failing to adhere to its own policies and controls as well as the law.

Respect for User Privacy – Keep it User-Centric

Best user experience puts privacy first. This includes putting the power in the hands of the user to manage their own data, actively seeking their engagement in the process.

Privacy by Design requires architects and operators to protect the interests of the individual by offering such measures as strong privacy defaults, appropriate notice, and empowering user-friendly options. (Consent, Accuracy, Access, Compliance …)