Business buy-in resulting in data privacy being brought in early to new projects and initiatives applying the principle of ‘privacy by design’