flowchart LR
    A["Compliance after<br/>the fact<br/>(security patches<br/>post-development)"] --"Embed from the<br/>design stage onward"--> B["Apply the 7<br/>Privacy by Design<br/>principles"] --"Technical and<br/>organizational<br/>implementation"--> C["A system built on<br/>privacy trust"]

    style A fill:#FFEBEE,stroke:#D32F2F,color:#000
    style B fill:#E3F2FD,stroke:#1976D2,color:#000
    style C fill:#E8F5E9,stroke:#388E3C,color:#000
  

    flowchart TD
    subgraph R1["　"]
        direction LR
        P1["1. Proactive not Reactive<br/>Prioritize preventive<br/>measures before a<br/>breach occurs"]
        P2["2. Privacy as the Default<br/>Guarantee maximum<br/>protection without<br/>any extra action"]
        P3["3. Privacy Embedded<br/>into Design<br/>Integrate privacy into<br/>core system functions"]
        P4["4. Full Functionality<br/>Security and privacy<br/>coexist (avoid<br/>zero-sum trade-offs)"]
    end
    subgraph R2["　"]
        direction LR
        P5["5. End-to-End Security<br/>Protect data across its<br/>full lifecycle, from<br/>collection to disposal"]
        P6["6. Visibility and<br/>Transparency<br/>Operate openly,<br/>allow independent<br/>verification"]
        P7["7. Respect for User<br/>Privacy<br/>Design centered on<br/>data-subject rights<br/>and consent"]
    end

    style P1 fill:#E3F2FD,stroke:#1976D2,color:#000
    style P2 fill:#F3E5F5,stroke:#7B1FA2,color:#000
    style P3 fill:#FFF3E0,stroke:#F57C00,color:#000
    style P4 fill:#E8F5E9,stroke:#388E3C,color:#000
    style P5 fill:#FFEBEE,stroke:#D32F2F,color:#000
    style P6 fill:#E0F2F1,stroke:#00796B,color:#000
    style P7 fill:#E8EAF6,stroke:#3949AB,color:#000
    style R1 fill:none,stroke:none
    style R2 fill:none,stroke:none
  

    flowchart LR
    subgraph TECH["Technical Implementation"]
        direction TB
        T1["Data minimization<br/>Collect only necessary data<br/>Block use beyond purpose"]
        T2["Pseudonymization/<br/>anonymization<br/>Render unidentifiable<br/>Use for stats/analysis"]
        T3["Access control<br/>Principle of least privilege<br/>Role-based access"]
        T4["Encryption<br/>At-rest and in-transit<br/>End-to-end encryption"]
    end

    subgraph ORG["Organizational Implementation"]
        direction TB
        O1["Perform DPIA<br/>Data protection impact<br/>assessment<br/>Pre-review high-risk processing"]
        O2["Appoint a DPO<br/>Data protection officer<br/>Independent oversight role"]
        O3["Employee training<br/>Privacy-awareness<br/>programs"]
        O4["Records of processing<br/>Maintain RoPA<br/>Audit-trail system"]
    end

    TECH --- ORG

    style TECH fill:#E3F2FD,stroke:#1976D2,color:#1E3A5F
    style ORG  fill:#E8F5E9,stroke:#388E3C,color:#1B5E20