Data protection by design aims to build data protection and privacy into the design of processing operations and information systems, in order to comply with data protection principles. Organisations are required to take into account the protection of the rights of individuals, both before and during their processing activities, by implementing the appropriate technical and organisation measures to ensure that they fulfil their data protection obligations. To ensure that this key principle of the General Data Protection Regulation is applied in practice, the EDPS will issue guidance documents.
Opinion on the Communication from the Commission towards a European e-Justice Stragegy, OJ C 28, 06.06.2009, p. 13
Opinion on the communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions on Radio Frequency Identification (RFID) in Europe: steps towards a policy framework (COM(2007) 96), OJ C 101, 23.04.2008, p. 1