We are equipped to support the implementation of the principle of data protection and security by design (Article 25 GDPR). Work in this area is carried out in synergy with the Client and any of its suppliers and takes account of the nature of the project, the IT context and the Client’s sector. We can support individual initiatives or the entire product and service development cycle. Our work typically includes the feasibility assessment, the analysis of the technology context and data flows, the identification of the technical and organisational solutions to adopt from the earliest stages and support with implementation. The value of data protection by design is that it prevents critical issues and later remediation costs and gives the Client a robust, accountability-oriented framework, reducing exposure to claims and sanctions and making products and services compliant from the outset.