Privacy and data protection must be built into the development of processes, products, and services from the very start. This means companies must ensure that privacy settings are at the highest standard by default.