Process that captures and refines privacy requirements and ensures their integration into information technology component products and information systems through purposeful privacy design or configuration.
Sources:
NIST SP 800-18r2
from
NIST SP 800-37 Rev. 2
NIST SP 800-37 Rev. 2
A specialty engineering discipline of systems engineering. It applies scientific, mathematical, engineering, and measurement concepts, principles, and methods to deliver, consistent with defined constraints and necessary trade-offs, a trustworthy asset protection capability that satisfies stakeholder requirements; is seamlessly integrated into the delivered system; and presents residual risk that is deemed acceptable and manageable to stakeholders.
Sources:
NIST SP 800-18r2
from
OMB Circular A-130 (2016)