Privacy by Design (PbD) - Seven Foundational Principles 1: Principle 1: Proactive not Reactive; Preventative not Remedial

Act before privacy harms arise rather than responding afterwards: anticipate and stop privacy-invasive events before they occur instead of waiting for risks to materialise or offering remedies once an infraction has happened. Applied to technology, organisational practice, physical design or networked ecosystems, this starts from openly recognising the benefit of taking up strong privacy practices from the outset and applying them steadily (stopping insider breaches before they occur is one example), and implies: leadership at the top committing to set and enforce privacy standards that are high, generally above what laws and regulations require; a commitment that users and stakeholders can be shown to share, within a culture that keeps improving; and established, systematic methods to spot weak privacy designs, foresee poor practices and outcomes, and correct negative impacts well before they happen.