## Privacy by Design & Default

Privacy by Design and Privacy by Default. The two key starting points for the proper handling of personal data. In short, the terms mean that you are building data protection safeguards into the design of your course from the earliest stage of development and setting by default the settings of products and services to the most privacy-friendly option.

Watch the video below before trying to complete the exercise:

### Privacy by Default

Like Privacy by Design, Privacy by Default is really a mindset. Every time you use a new product or service or adjust an existing service or product, ask yourself: how can I minimise the sharing of personal data through this service or product?

Setting the service or product settings to the most privacy-friendly option enables you to approach your work with a privacy-by-default mindset. Examples of this include:

- Choose, if possible, digital applications in which students do not have to create a new account, but can be identified by a number or nickname of their own choosing.
- Where possible, store student data only within digital applications that have been made available by the educational institution.
- When using a new digital application, disable all unnecessary tracking systems (e.g. location, IP address, device type, etc.) where possible.

### 'Privacy by Design'

Every course is different, so the exact measures to be taken for every step in your course to safeguard student and employee privacy may also differ. Therefore, Privacy by Design mainly involves cultivating a mindset of focusing on privacy throughout your course.

Below, you will find a fictional series of lessons divided into six steps. Try to discover the technical and organisational measures that you could take with every step.