Privacy and Data Protection by Design - from policy to engineering
George Danezis, Josep Domingo-Ferrer, Marit Hansen, Jaap-Henk Hoepman,, Daniel Le Metayer, Rodica Tirtea, Stefan Schiffner

TL;DR
This paper reviews how legal privacy principles can be integrated into system design through privacy-enhancing technologies, emphasizing the need for a structured approach to embed privacy by design in practice.
Contribution
It provides an inventory of existing privacy design strategies and proposes a method to translate legal obligations into technical design choices.
Findings
Inventory of privacy design approaches and tools
A proposed method to map legal requirements to technical strategies
Discussion of limitations and recommendations for implementation
Abstract
Privacy and data protection constitute core values of individuals and of democratic societies. There have been decades of debate on how those values -and legal obligations- can be embedded into systems, preferably from the very beginning of the design process. One important element in this endeavour are technical mechanisms, known as privacy-enhancing technologies (PETs). Their effectiveness has been demonstrated by researchers and in pilot implementations. However, apart from a few exceptions, e.g., encryption became widely used, PETs have not become a standard and widely used component in system design. Furthermore, for unfolding their full benefit for privacy and data protection, PETs need to be rooted in a data governance strategy to be applied in practice. This report contributes to bridging the gap between the legal framework and the available technological implementation…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsPrivacy-Preserving Technologies in Data · Privacy, Security, and Data Protection · Cryptography and Data Security
