Privacy by Design and Default