Process that captures and refines privacy requirements and ensures their integration into information technology component products and information systems through purposeful privacy design or configuration.
Source(s):
NIST SP 800-37 Rev. 2