Companies that want to survive on the market in the long term must no longer regard data protection as a necessary evil. The principle of “privacy by design” involves collecting only as much personal data during data processing as is absolutely necessary for the respective application. However, the idea behind it is hardly new. As early as 1995, Ann Cavoukian, one of the leading data protection experts, developed a concept according to which data protection could not be achieved by government regulations alone, but should rather be anchored as a fundamental goal in every company.