The GDPR requires that organizations exhibit commitment to individuals’ data privacy by implementing a data protection by design and by default approach  meaning organizations need to build privacy and protection into their products  services  and applications