Privacy protection designed in before events occur 2. **Privacy as the default setting** — Maximum privacy without user action; sharing requires affirmative choice 3. **Privacy embedded into design** — Privacy integral to system architecture, not added on top 4. **Full functionality — positive-sum,