As you said, there’s basically the pre-GDPR view of just exploit as needed and then the GDPR view of everything is closed off by default. I think privacy, by design, can also enable data dignity by design.