Privacy and Security by Design
Building in security and privacy from the start
Security by design is the principle of building security and privacy into the very first design stage of a product, instead of treating them as a final review before launch, because problems detected at the end are usually much costlier and more complex to fix than if they had been considered from the initial sketch. In practice, this means a designer or product manager asks, before building a feature, what personal data they really need to request and what happens if that information falls into the wrong hands, not just how to make the experience smoother for the user. An applied example is designing a sign-up form that asks only for an email address instead of full name, phone number and address from the start, thus reducing the amount of sensitive data exposed if the system were ever compromised.