Core Definition
Privacy by Design is the principle of building privacy protection into a system from the start, as the default. It underpins GDPR Article 25's "data protection by design and by default" — aiming for structures where personal data never arises or is minimized, rather than relying on after-the-fact consent and deletion.
Why "design" matters
Bolting protections onto a system that's already running always leaves gaps. Access permissions, retention periods, deletion procedures: the more rules there are to follow, the more room there is for human error.
Solve it through design and structure does the enforcing, not rules. If personal data never enters the system, there is nothing to leak and nothing to misuse. Audits and certification, too, only need to confirm the structure is built this way, not that every procedure was followed.
Application to in-store video analytics
CCTV video analytics is one of the areas where Privacy by Design matters most, because most people on screen are unspecified customers who cannot give consent. Anonymization at the point of input, no storage of original footage, and export of statistical values only: when these three elements are structurally in place, protection holds even without consent.
Without this structure, even the best analytics rests on legal uncertainty. That's why, at the evaluation stage, the question of "what remains" matters as much as "how it's analyzed."
How SAAI Uses It
DEEPINGSOURCE's products stand on this principle. Video is anonymized at the point of input (no original footage retained); no person ever views the footage (no human review); and identity cannot be recovered from anonymized data (no re-identification). Because protection is fixed as the first step of the pipeline rather than an option, the same standard applies wherever the products are deployed.
See it in action