28/10/2020
The EDPB Guidelines on Article 25 Data Protection by Design and by Default
The European Data Protection Board has published the final version of the Guidelines on Article 25 Data Protection by Design and by Default.
These Guidelines give general guidance on the obligation of Data Protection by Design and by Default (DPbDD). The core obligation is the implementation of appropriate measures and necessary safeguards that provide effective implementation of the data protection principles and, consequentially, data subjects’ rights and freedoms by design and by default. Controllers shall implement DPbDD before processing, and also continually at the time of processing, by regularly reviewing the effectiveness of the chosen measures and safeguards. DPbDD also applies to existing systems that are processing personal data.
The Guidelines can be accessed here.