Privacy by Design

Short answer

Privacy by design is the practice of building privacy protections into products, systems and processes from the start rather than adding them later. GDPR codifies it as data protection by design and by default. In practice it means minimizing data, limiting access, setting privacy-protective defaults and assessing risks early.