Designing products that protect privacy
-
Due to the Data (Use and Access) Act coming into law on 19 June 2025, this guidance is under review and may be subject to change. The Plans for new and updated guidance page will tell you about which guidance will be updated and when this will happen.
The guidance on this page is for people designing digital products and services that involve processing personal information.
Getting started
How to think about privacy in product design
Practical tools and guidance to design for privacy at all stages of the product design process, including kick-off, research, design, development, launch, and post-launch phases.
In detail
Designing for children
Guidance and resources for designing online services likely to be accessed by children and applying the standards of the children's code in practice.
Data protection by design and default
The UK GDPR requires you to integrate data protection concerns into every aspect of your processing activities.
Guidance for consumer Internet of Things products and services
This guidance explains how data protection law and the Privacy and Electronic Communications Regulations 2003 (as amended) (PECR) apply when you process personal information in consumer Internet of Things (IoT) products.
Resources
Conference recordings - Privacy seriously? 2023
Design and product leaders revealed how they put privacy at the heart of responsible innovation. Watch recordings of talks titled - 'Privacy is a product issue', 'Privacy in the real world of tech', 'Ditching deceptive design', and 'Designing for safety'.