During the European Data Protection Board Plenary, held remotely on the 20^th of October 2020, the Guidelines 4/2019 on Article 25 Data Protection by Design and by Default, final version, was adopted.

In the context of accentuated technological developments, the principle of data protection by design and by default, enshrined in Article 25 of the GDPR, is a significant aspect in ensuring compliance with data protection in the contemporary society.

The adopted guidelines is intended to support controllers and processors in order to ensure an uniform and effective application of the requirements of this principle, taking into account the purpose, nature, context and risks of processing, in connection wit the necessity for an effective observance also of the other principles relating to the processing of personal data.

This tool contains numerous practical examples and a section of recommendations, including on the role of the data protection officer within the controllers/processors.

Additional information can be found at the link:

https://edpb.europa.eu/news/news_en

Legal and Communication Department

ANSPDCP