A privacy-by-design framework is essential to mitigate increasing global privacy risks and is required under some laws, such as the GDPR. An effective framework requires organizations to consider privacy at the initial design stages and throughout the development process of new products, processes or services that involve processing personal data. We spoke to Kate Barecchia, deputy general counsel and global data privacy officer of cybersecurity services and software company Imperva, Inc., about her experience and advice on implementing a privacy-by-design strategy, including conducting the data privacy impact assessment, overcoming challenges and ongoing risk management. See “NIST Privacy Framework: Insights on New Tool for Managing Privacy Risks” (May 6, 2020).