(Q4484)

Data protection by design is not just a question of implementation, but a more complex consideration in need of precise and detailed discussion. The GDPR itself requires operators of large-scale data processing systems to produce a data protection impact assessment (DPIA) if the systems pose high risks to fundamental rights and freedoms.