After the European Data Protection Board adopted its guidelines for data protection by design and default during its 15th plenary meeting, these guidelines are now open for comments as part of a public consultation. The process will be open until 16 January 2020, and focus in particular on controllers' implementation and interpretation of data protection by default and design in EU's GDPR.