The paper introduces two concepts in data protection: privacy by design and privacy by default. Those concepts are closely connected. They already existed in data protection, although the data protection reform made them a legally binding concept. The article outlines the new ePrivacy Directive and its specification of the discussed concepts.

Keywords: Data protection, European Union, ePrivacy Directive, Digital Single Market, GDPR, Privacy by Design, Privacy by Default.