In this module, the principles of data protection by design and default are explained in more detail. The background, purpose and meaning of these principles are discussed. Participants in this module can translate these principles into their own organization in such a way that the means by which the processing of personal data is carried out as well as the processing themselves comply with these principles. They can also assess the means by which the processing of personal data is carried out and the associated procedures and measures to the extent to which they comply with the principles of data protection by design and default. They are also able to formulate requirements in, for example, tendering procedures for the purchase or development of information systems.