Data protection by design
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Data protection by design - Embedding data protection into the design of systems and technologies from the outset and across the entire data life cycle.
In the CIPP/E body of knowledge, Data protection by design comes up under Ch 11.3 - Article 25; IAPP Training · Module 10 - BoK IV.B.
Data protection by design in context
- Key innovations include [[data protection by design and by default]], [[accountability]], the [[one-stop shop]] and broad reach over anyone ==targeting EU consumers==. (The General Data Protection Regulation)
- [[Article 25]] requires [[data protection by design]] and [[data protection by default]] - the technical and organisational measures a [[controller]] builds in to protect rights. (Data protection by design and by default)
- In practice [[accountability]] means data protection by design and default, [[DPIAs]], records of processing and appointing a [[DPO]] where needed. (Module 10 · Accountability defined (Article 24))
Where Data protection by design is covered in the CIPP/E study notes
- Data protection by design and by default
- Module 10 · Data protection by design and by default (Article 25)
Related terms
- Article 25
- Data protection by default
- Privacy by Design (PbD)
- Certification
Test yourself on Data protection by design
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.