Data protection through design means that only the required personal data is collected and that privacy features and functionality are processed into products and services from the first moment they are designed.
Data protection standard means that companies must take appropriate measures to limit privacy risks at the time the data is collected, as well as by extending it at the time of processing.