Privacy-first by design