Privacy by design and by default