Integrating data protection principles into the development of systems and processes from the beginning (Article 25).