?url_ver=Z39.88-2004&rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&rft.title=Privacy+and+Data+Protection+by+Design+-+from+policy+to+engineering&rft.creator=Danezis%2C+G&rft.creator=Domingo-Ferrer%2C+J&rft.creator=Hansen%2C+M&rft.creator=Hoepman%2C+JH&rft.creator=Metayer%2C+DL&rft.creator=Tirtea%2C+R&rft.creator=Schiffner%2C+S&rft.description=Privacy+and+data+protection+constitute+core+values+of+individuals+and+of+democratic+societies.+There+have+been+decades+of+debate+on+how+those+values+-and+legal+obligations-+can+be+embedded+into+systems%2C+preferably+from+the+very+beginning+of+the+design+process.+One+important+element+in+this+endeavour+are+technical+mechanisms%2C+known+as+privacy-enhancing+technologies+(PETs).+Their+effectiveness+has+been+demonstrated+by+researchers+and+in+pilot+implementations.+However%2C+apart+from+a+few+exceptions%2C+e.g.%2C+encryption+became+widely+used%2C+PETs+have+not+become+a+standard+and+widely+used+component+in+system+design.+Furthermore%2C+for+unfolding+their+full+benefit+for+privacy+and+data+protection%2C+PETs+need+to+be+rooted+in+a+data+governance+strategy+to+be+applied+in+practice.+This+report+contributes+to+bridging+the+gap+between+the+legal+framework+and+the+available+technological+implementation+measures+by+providing+an+inventory+of+existing+approaches%2C+privacy+design+strategies%2C+and+technical+building+blocks+of+various+degrees+of+maturity+from+research+and+development.+Starting+from+the+privacy+principles+of+the+legislation%2C+important+elements+are+presented+as+a+first+step+towards+a+design+process+for+privacy-friendly+systems+and+services.+The+report+sketches+a+method+to+map+legal+obligations+to+design+strategies%2C+which+allow+the+system+designer+to+select+appropriate+techniques+for+implementing+the+identified+privacy+requirements.+Furthermore%2C+the+report+reflects+limitations+of+the+approach.+It+concludes+with+recommendations+on+how+to+overcome+and+mitigate+these+limits.&rft.subject=personal+data%2C+data+processing%2C+protection+of+privacy%2C+digital+technology%2C+data+protection%2C+risk+prevention%2C+European+Network+and+Information+Security+Agency%2C+product+design%2C+artistic+creation%2C+technological+process&rft.publisher=European+Union+Agency+for+Network+and+Information+Security+(ENISA)&rft.date=2014-12&rft.type=Report&rft.language=eng&rft.source=++++European+Union+Agency+for+Network+and+Information+Security+(ENISA)%3A+Heraklion%2C+Greece.+++++&rft.format=text&rft.identifier=https%3A%2F%2Fdiscovery.ucl.ac.uk%2Fid%2Feprint%2F1463998%2F1%2FDanezis_1501.03726v2.pdf&rft.identifier=https%3A%2F%2Fdiscovery.ucl.ac.uk%2Fid%2Feprint%2F1463998%2F&rft.rights=open