{"id":14158,"date":"2020-09-21T09:05:56","date_gmt":"2020-09-21T12:05:56","guid":{"rendered":"https:\/\/ostec.blog\/?p=14158"},"modified":"2020-09-21T09:07:20","modified_gmt":"2020-09-21T12:07:20","slug":"privacy-by-design","status":"publish","type":"post","link":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/","title":{"rendered":"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR"},"content":{"rendered":"

You probably have heard of the Brazilian GDPR, the General Law for the Protection of Personal Data, enacted in 2018 and which provides for greater vigilance and punishment in the case of misuse of data collected by companies and individuals for different purposes.<\/p>\n

One of the\u00a0<\/span>principles of GDPR<\/a>\u00a0<\/span>is to ensure data subjects privacy throughout the life cycle of the data, that is, from the moment of capture, processing and sharing, to the deletion of information from the company\u2019s databases.<\/p>\n

If you store or process personal data of customers, employees, third parties, etc., you must comply with the GDPR, which will come into force in August 2020.<\/p>\n

And to understand a little more about the terminologies that gained strength with the emergence of GDPR, we developed this blog post that brings the meaning of\u00a0privacy by design<\/b>\u00a0as well as its relationship with GDPR. Read on!<\/p>\n

Origin of the concept \u201cprivacy by design\u201d<\/h2>\n

\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian. At that time, the specialist already imagined that the advancement of technology and ease of communication would enable an indiscriminate collection of personal information and, therefore, some concept should be applied so that corporations would understand and apply privacy rules in their solutions and products offered.<\/p>\n

As of 2010, several entities around the world began to disseminate and apply these concepts, such as the European Data Protection Authority and the Federal Trade Commission in the United States.\u00a0Privacy by design<\/b>\u00a0is currently incorporated into European data protection legislation (GDPR) and our General Data Protection Law (LGPD).<\/p>\n

What does \u201cprivacy by design\u201d really mean?<\/h2>\n

The idea of\u00a0privacy by design<\/b>\u00a0is that companies incorporate this methodology in every conception of a product or service, placing privacy protection at the center of all development, including this idea among their values and guiding their ethical conduct.<\/p>\n

For companies and users to understand and incorporate the ideas of\u00a0privacy by design<\/b>, the 7 pillars that form it must be taken into account.<\/p>\n

1) Be proactive and not reactive \u2013 Prevention is better than cure<\/h3>\n

One should always anticipate and anticipate events that could compromise the user\u2019s privacy. Thus, it is necessary to constantly monitor, analyze risks and develop corrections whenever any possible fault is identified, taking precautions to prevent it from occurring.<\/p>\n

2) Privacy by default<\/h3>\n

The standard configuration of any service available to the user, should provide maximum protection to the user. He should not need to adjust any settings to ensure his privacy.<\/p>\n

A simple example of a practical application of this principle may be the option of sharing your smartphone\u2019s location. In order to comply with this principle, it should, by default, be configured not to perform this sharing in any way.<\/p>\n

3) Privacy built into the project<\/h3>\n

Privacy should not be seen as an addition to the project. It is an inseparable part of the developed solution, conceived since its conception.<\/p>\n

4) Full functionality \u2013 \u201cPositive-Sum\u201d instead of zero-sum<\/h3>\n

A positive-sum game is one in which everyone wins, unlike the zero-sum game, where for one to win, another must lose.<\/p>\n

For the\u00a0privacy by design<\/b>\u00a0methodology, data protection must be in line with the interests and objectives of those who use this information. Thus, there should not be, for example, an extra advantage or functionality for anyone who changes some privacy setting. All features must be complete and protected.<\/p>\n

5) End-to-end security \u2013 Protection throughout the information lifecycle<\/h3>\n

All data must be secure from collection to destruction or sharing with a third party. Personal data cannot be forgotten on old devices or unused databases. Much less should they be allowed to be accessed by third parties without authorization.<\/p>\n

6) Visibility and transparency<\/h3>\n

The data subject must always be allowed to know for what purpose his information is being collected, who has access to it and even have the possibility that independent entities can carry out audits to make sure that the information is being protected.<\/p>\n

7) Respect for user privacy \u2013 User-centered solution<\/h3>\n

This is one of the basic precepts of\u00a0privacy by design<\/b>. The entire architecture and operability of the system or business practice must be centered on user privacy, always thinking about the complete protection of their data.<\/p>\n

How do you know if your company is prepared for GDPR?<\/h2>\n

The General Data Protection Law is already a reality<\/a>\u00a0<\/span>for companies that started the adaptation process and should be the center of attention from now on. Those who neglect it can suffer heavy fines and losses in the event of security breaches.<\/p>\n

But, if you still don\u2019t know how far your business is from compliance with the General Data Protection Law\u00a0<\/span>complete our free diagnosis<\/a>. So you can identify if you are prepared to walk the path towards compliance with the law, and above that, ensure greater protection for your users and, of course, competitive advantage for your business.<\/p>\n","protected":false},"excerpt":{"rendered":"

You probably have heard of the Brazilian GDPR, the General Law for the Protection of Personal Data, enacted in 2018 and which provides for greater vigilance and punishment in the case of misuse of data collected by companies and individuals for different purposes. One of the\u00a0principles of GDPR\u00a0is to ensure data subjects privacy throughout the […]<\/p>\n","protected":false},"author":13,"featured_media":14161,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[984,992,993],"tags":[1586,1623],"class_list":["post-14158","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","category-learning-and-discovery","category-lgpd-en","tag-lgpd-en","tag-privacy-by-design-en"],"yoast_head":"\nWhat does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR - OSTEC | Seguran\u00e7a digital de resultados<\/title>\n<meta name=\"description\" content=\"\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR - OSTEC | Seguran\u00e7a digital de resultados\" \/>\n<meta property=\"og:description\" content=\"\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\" \/>\n<meta property=\"og:site_name\" content=\"OSTEC | Seguran\u00e7a digital de resultados\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ostec\" \/>\n<meta property=\"article:published_time\" content=\"2020-09-21T12:05:56+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-09-21T12:07:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"928\" \/>\n\t<meta property=\"og:image:height\" content=\"534\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Thais Souza\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ostecsecurity\" \/>\n<meta name=\"twitter:site\" content=\"@ostecsecurity\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\"},\"author\":{\"name\":\"Thais Souza\",\"@id\":\"https:\/\/ostec.blog\/#\/schema\/person\/ca88ecd81da20ed5773cd0959c645c33\"},\"headline\":\"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR\",\"datePublished\":\"2020-09-21T12:05:56+00:00\",\"dateModified\":\"2020-09-21T12:07:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\"},\"wordCount\":833,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/ostec.blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg\",\"keywords\":[\"lgpd\",\"privacy by design\"],\"articleSection\":[\"General\",\"Learning and discovery\",\"LGPD\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\",\"url\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\",\"name\":\"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR - OSTEC | Seguran\u00e7a digital de resultados\",\"isPartOf\":{\"@id\":\"https:\/\/ostec.blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg\",\"datePublished\":\"2020-09-21T12:05:56+00:00\",\"dateModified\":\"2020-09-21T12:07:20+00:00\",\"description\":\"\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian.\",\"breadcrumb\":{\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage\",\"url\":\"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg\",\"contentUrl\":\"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg\",\"width\":928,\"height\":534},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\/\/ostec.blog\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ostec.blog\/#website\",\"url\":\"https:\/\/ostec.blog\/\",\"name\":\"OSTEC | Seguran\u00e7a digital de resultados\",\"description\":\"Empresa especializada na oferta de produtos e servi\u00e7os de seguran\u00e7a digital.\",\"publisher\":{\"@id\":\"https:\/\/ostec.blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ostec.blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/ostec.blog\/#organization\",\"name\":\"OSTEC Business Security\",\"url\":\"https:\/\/ostec.blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ostec.blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/ostec.blog\/wp-content\/uploads\/2020\/11\/logo_ostec_250.png\",\"contentUrl\":\"https:\/\/ostec.blog\/wp-content\/uploads\/2020\/11\/logo_ostec_250.png\",\"width\":251,\"height\":67,\"caption\":\"OSTEC Business Security\"},\"image\":{\"@id\":\"https:\/\/ostec.blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/ostec\",\"https:\/\/x.com\/ostecsecurity\",\"https:\/\/www.instagram.com\/ostecsecurity\/\",\"https:\/\/linkedin.com\/company\/ostec-security\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/ostec.blog\/#\/schema\/person\/ca88ecd81da20ed5773cd0959c645c33\",\"name\":\"Thais Souza\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/ostec.blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/400dde6458954de06efa803109767977?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/400dde6458954de06efa803109767977?s=96&d=mm&r=g\",\"caption\":\"Thais Souza\"},\"url\":\"https:\/\/ostec.blog\/en\/author\/thais-souza\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR - OSTEC | Seguran\u00e7a digital de resultados","description":"\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/","og_locale":"en_US","og_type":"article","og_title":"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR - OSTEC | Seguran\u00e7a digital de resultados","og_description":"\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian.","og_url":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/","og_site_name":"OSTEC | Seguran\u00e7a digital de resultados","article_publisher":"https:\/\/www.facebook.com\/ostec","article_published_time":"2020-09-21T12:05:56+00:00","article_modified_time":"2020-09-21T12:07:20+00:00","og_image":[{"width":928,"height":534,"url":"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg","type":"image\/jpeg"}],"author":"Thais Souza","twitter_card":"summary_large_image","twitter_creator":"@ostecsecurity","twitter_site":"@ostecsecurity","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#article","isPartOf":{"@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/"},"author":{"name":"Thais Souza","@id":"https:\/\/ostec.blog\/#\/schema\/person\/ca88ecd81da20ed5773cd0959c645c33"},"headline":"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR","datePublished":"2020-09-21T12:05:56+00:00","dateModified":"2020-09-21T12:07:20+00:00","mainEntityOfPage":{"@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/"},"wordCount":833,"commentCount":0,"publisher":{"@id":"https:\/\/ostec.blog\/#organization"},"image":{"@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage"},"thumbnailUrl":"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg","keywords":["lgpd","privacy by design"],"articleSection":["General","Learning and discovery","LGPD"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/","url":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/","name":"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR - OSTEC | Seguran\u00e7a digital de resultados","isPartOf":{"@id":"https:\/\/ostec.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage"},"image":{"@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage"},"thumbnailUrl":"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg","datePublished":"2020-09-21T12:05:56+00:00","dateModified":"2020-09-21T12:07:20+00:00","description":"\u201cPrivacy by definition\u201d, in free translation, is a methodology created in the 90s by the Commissioner for Information and Privacy of Ontario, Canada, Dr. Ann Cavoukian.","breadcrumb":{"@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ostec.blog\/en\/general\/privacy-by-design\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#primaryimage","url":"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg","contentUrl":"https:\/\/ostec.blog\/wp-content\/uploads\/2019\/07\/Digitando-em-PC.jpg","width":928,"height":534},{"@type":"BreadcrumbList","@id":"https:\/\/ostec.blog\/en\/general\/privacy-by-design\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/ostec.blog\/en\/"},{"@type":"ListItem","position":2,"name":"What does \u201cprivacy by design\u201d mean and what is the relationship with the GDPR"}]},{"@type":"WebSite","@id":"https:\/\/ostec.blog\/#website","url":"https:\/\/ostec.blog\/","name":"OSTEC | Seguran\u00e7a digital de resultados","description":"Empresa especializada na oferta de produtos e servi\u00e7os de seguran\u00e7a digital.","publisher":{"@id":"https:\/\/ostec.blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ostec.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/ostec.blog\/#organization","name":"OSTEC Business Security","url":"https:\/\/ostec.blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ostec.blog\/#\/schema\/logo\/image\/","url":"https:\/\/ostec.blog\/wp-content\/uploads\/2020\/11\/logo_ostec_250.png","contentUrl":"https:\/\/ostec.blog\/wp-content\/uploads\/2020\/11\/logo_ostec_250.png","width":251,"height":67,"caption":"OSTEC Business Security"},"image":{"@id":"https:\/\/ostec.blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ostec","https:\/\/x.com\/ostecsecurity","https:\/\/www.instagram.com\/ostecsecurity\/","https:\/\/linkedin.com\/company\/ostec-security"]},{"@type":"Person","@id":"https:\/\/ostec.blog\/#\/schema\/person\/ca88ecd81da20ed5773cd0959c645c33","name":"Thais Souza","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/ostec.blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/400dde6458954de06efa803109767977?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/400dde6458954de06efa803109767977?s=96&d=mm&r=g","caption":"Thais Souza"},"url":"https:\/\/ostec.blog\/en\/author\/thais-souza\/"}]}},"_links":{"self":[{"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/posts\/14158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/comments?post=14158"}],"version-history":[{"count":0,"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/posts\/14158\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/media\/14161"}],"wp:attachment":[{"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/media?parent=14158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/categories?post=14158"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ostec.blog\/en\/wp-json\/wp\/v2\/tags?post=14158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}