What does privacy by design entail and how should it be assessed in IT system development and operation?

• A. Add privacy considerations after deployment.
• B. Integrate privacy into system design from the outset; assess data minimization, access controls, encryption, DPIAs, and ongoing privacy risk monitoring.
• C. Remove all data collection to avoid privacy concerns.
• D. Use privacy by policy only without technical controls.

Answer: (B)