Privacy by Default

Data protection by default is the principle according to which an organisation (the data controller) ensures that only data strictly necessary for each specific purpose of the processing are processed by default (without the intervention of the user). To ensure that this key principle of the General Data Protection Regulation is applied in practice, the EDPS will issue guidance documents.