The principle of Privacy By Design is at the heart of the General Data Protection Regulation (GDPR). Article 25 of this legislative framework, which aims to protect the privacy of European citizens, is entitled "Data protection by design and by default" and incorporates the Privacy By Design principle.