EDPB Guidelines on Article 25

Guidelines 4/2019 on Article 25 Data Protection by Design and by Default

The guidelines provide guidance on how to effectively implement the data protection principles in Article 5, listing key design and default elements as well as practical cases for illustration. The document includes recommendations for cooperation between controllers, processors, and producers in achieving Data Protection by Design and by Default set forth in Article 25 in the GDPR and highlights the role of certifications and codes of conduct in data protection practices.