Reducing Risk And Fostering Breach Resilience Via Privacy By Design

Data incidents are an increasingly common risk of carrying on any data-involved business. However, the practical and legal risks of these incidents can be managed through holistic, multi-stage planning: planning what to do in the event of a breach, and planning a system that minimizes the possibility of a data incident, makes it easier to manage and contain such an incident, should one occur, and reduces the risk of legal liability stemming from such an incident.

Adoption of the "privacy by design" approach can help to achieve this.

Below, we address the role of privacy by design principles in reducing the risk of a data incident. We explain the role these principles can play in reducing practical and legal risk, and outline a few examples of incorporating proactive and end-to-end data protection as a form of legal risk reduction. For an in-depth discussion of planning for breach resilience, see Cybersecurity Risk Management: A Practical Guide for Businesses.