IR01 | Awareness IR01 | Identifying and managing information risk: Data Protection 1.Understand privacy by design and default principles and how this translates into processes and procedures.