Privacy by design considerations