The technical and organizational consideration of data privacy during the development of new technologies and products (Privacy by Design) and the implementation of privacy-friendly preferences (Privacy by Default) are two examples of how future-oriented requirements of the GDPR have already been put into practice.