Privacy by design — Certified Information Privacy Technologist

The official IAPP documentation our Privacy by design practice questions are cited to. Review the primary sources, then practise.

Official references for this objective

Iapp — Top 10 Operational Responses to the GDPR – Part 4: Data protection impact assessments and data protection by default and by design | IAPP

Data protection by default would mean that the system is preconfigured to the most privacy-friendly setting (e.g., posts would be shared with specific friends only)
Iapp — Focus areas when implementing data protection by design and by default in 2026 | IAPP

the need to conduct structured risk assessments, document the principles of operation and intended purpose of AI systems, track training data, and implement control mechanisms