Data Protection by Design & by Default

This is an overarching principle of GDPR. It means building data protection into business processes, products and services from the outset.