Data privacy.

Privacy By Design.

Privacy by design is a concept developed by Dr. Ann Cavoukian in the 1990’s, in conjunction with data regulation authorities across the globe.  This framework is built around the idea that privacy cannot be assured by compliance with regulation alone; rather, that it should ideally become an organization’s default mode of operation.

Privacy by design is all about giving people control over their information, & about organizations becoming accountable. When I build my clients’ sites, as well as my own, I follow the seven foundational principles of privacy by design. 

Proactive not reactive; preventive not remedial.

It’s all about identifying & anticipating risks, rather than trying to find solutions when problems have already happened. This approach is all about acting before-the-fact & preventing privacy breaches from taking place. 

Privacy as the default.

Within this framework privacy is the default setting throughout the system. What this means is that you, as a visitor, don’t have to take any action for your privacy to be safeguarded.

Privacy embedded into design.

Privacy is an integral part of the design process, not an addon or an afterthought. It is an essential component of a site’s functionality & of an organization’s business practices. 

Full functionality – positive sum not zero sum.

It is possible to create a win-win scenario where privacy & other legitimate interests and goals are fulfilled. The framework looks to dismantle the old way of thinking with false dichotomies that pin privacy against other goals like security or user experience.

End-to-end security – full life cycle protection.

Information is securely collected, securely retained & securely destroyed. Every step of the process has been designed in a deliberate way to keep information safe. 

Visibility & transparency – keep it open. 

Making all information about privacy & protection available to all stakeholders, being open, honest and transparent about the process.

Respect for user privacy.

Keeping the systems user-centric empowers people to decide about their information and make choices in an user friendly way.