## Privacy by Design

Privacy by Design. One of the key starting points for proper handling of personal data. It means that you do not only describe clearly in your research plan how you will safeguard privacy, but also that you take the correct technical and organisational measures for every step in the research process. This exercise will show you which they are.

### Exercise 'Privacy by Design'

Every study is different, so the exact measures to be taken for every step in your study differ as well. What is important is the ‘mindset’ that you focus on privacy throughout your study.

Below shows a study divided in six steps. Try to discover the technical and organisational measures that you could take with every step.

### Context

The specific organisational and technological measures you have to take in every step of your study depends on the context in which you perform the study. This involves questions such as:

- Does the study involve collaboration of public or private parties?
- Are multiple countries involved in the research and if so, which?
- Does the study assume existing data sets or does the study only create a new data set?
- Do the researchers use new technologies or very extensive data sets in the study?

To know which measures apply in your situation, you may perform a DPIA prior to your study. The Dutch name for this is a 'gegevensbeschermings- effectbeoordeling'. We will discuss this in more detail on the next page.