Privacy by Design (PbD) focuses on incorporating privacy into the design and execution of products and services from the outset. This includes privacy consultations in procurement (A), assessing privacy risks in the architecture (B), and integrating privacy controls into product launch procedures (C). Conducting a root cause analysis on privacy incidents (D) is a reactive measure taken after a privacy incident has occurred, rather than a proactive incorporation of privacy in the design phase, making it the exception.