What does privacy by design mean in the context of inquiries?

What does privacy by design mean in the context of inquiries?

• A. Leaving privacy protections to be added later in the project life cycle.
• B. Embedding privacy protections into every process from the start; minimize data collection and limit disclosures.
• C. Only include privacy protections for high-risk inquiries.
• D. Ignore privacy concerns until a data breach occurs.

Answer: (B)

Privacy by design means embedding privacy protections into every step of a system or process from the very beginning, rather than adding them after the fact. Inquiries should be handled with privacy considerations built in from the start: collect only what you need to answer the inquiry, limit who can access the information, and apply safeguards by default—such as data minimization, access controls, and secure handling and retention policies. This proactive approach reduces risk because privacy is a guiding principle in design, not an afterthought.

Delaying protections, applying privacy only to high-risk cases, or ignoring privacy until a breach occurs are reactive approaches that increase risk and fail to protect individuals' information.