Filers who named this exact article number in their own text. It is their sentence, not our reading — and not a causal claim.
| Who | Country | What they wrote |
|---|---|---|
| European Association of Public Banks and funding agencies (EAPB) | BE | is generally a prohibition of employment on Sundays and holidays (see § 9 (1) ArbZG). • Data protection by design and by default (Article 25): Article 25 addresses only data controllers, not manufacturers. This compels controllers to assess products for privac ↗ |
| FIBEP Event und Management GmbH | AT | systems used in media monitoring should incorporate privacy-enhancing technologies from their inception, ensuring compliance with Article 25 of the GDPR. Techniques such as data anonymization and pseudonymization should be prioritized to protect personal data ↗ |
| DIGITALEUROPE | BE | data protection measures on a wider scale. Similarly, several mechanisms outlined in the GDPR remain underutilised. For instance, Art. 25 GDPR highlights the significance of PETs, which should be further recognised and encouraged in the implementation of the G ↗ |
| Deutscher Juristinnenbund e.V. | DE | nen diskriminieren oder schädigen können, ausreichend repräsentativ insbesondere auch hinsichtlich des Geschlechts sind. in den Art. 25 DSGVO, der die Grundprinzipien „Privacy by Design“ und „Privacy by Default“ regelt, eine "Equality by Design" Bestimmung a ↗ |
| ESOMAR | NL | e risk-based approach of the GDPR to the modern data economy. Reflected in a number of provisions (e.g. Art 24 on accountability, Art. 25 on the principles of privacy by design and privacy by default, Articles. ↗ |
| 5Rights Foundation | GB | es 10/2020 on restrictions under Article 23 GDPR; Guidelines 08/2020 on the targeting of social media users; Guidelines 4/2019 on Article 25 Data Protection by Design and by Default 2 Available at: https://www.dataprotection.ie/en/dpc-guidance/fundamentals-chi ↗ |
| EuroISPA (European Internet Services Providers Association) | BE | guidance should lay out the interplay with and opportunities for usage of privacy-enhancing technologies (PETs), considering that art. 25 of the GDPR highlights its significance to manage responses to data subject requests on a large scale. b. There are still ↗ |
| Asociación Española de Economía Digital (Adigital) | ES | ns with particular regard to decisions adopted pursuant to Article 45(3) of this Regulation and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC; and Chapter VII, on cooperation and consistency. The first report on the evaluation and revie ↗ |
| Technology Ireland, Ibec | IE | data protection measures on a wider scale. Similarly, several mechanisms outlined in the GDPR remain underutilised. For instance, Art. 25 GDPR highlights the significance of PETs, which should be further recognised and encouraged in the implementation of the G ↗ |
| Oplysningsforbundet May Day | DK | tilsynsorganer opfylde kravene i direktiv 95/46/EF om fortrolighed og behandlingssikkerhed". Endvidere fremgår det også af GDPRs artikel 25 stk. 1, at hvis den dataansvarlige kan gennemføre passende tekniske foranstaltninger i forhold til at pseudonymisere og ↗ |
| Telefonica, S.A. | ES | ns with particular regard to decisions adopted pursuant to Article 45(3) of this Regulation and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC; and • Chapter VII on cooperation and consistency. The functioning of Chapter VII is addressed ↗ |
| United Internet | DE | ns with particular regard to decisions adopted pursuant to Article 45(3) of this Regulation and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC; and • Chapter VII on cooperation and consistency. ↗ |
| World Federation of Advertisers | BE | led the EDPB to develop guidelines on the use of deceptive design patterns in social media platform interfaces (03/2021) with DSA Article 25 which introduces a ban on online platform providers designing, organizing or operating online interfaces more widely “i ↗ |
| ZKI e.V. | DE | n zum Teil auf die Hersteller derartiger Angebote zu verlagern und durchsetzbare Pflichten diesen gegenüber auszugestalten. Bspw. Art. 25 DSGVO könnte hierfür angepasst und im Sinne einer Herstellverantwortlichkeit in Anlehnung an das EU-Produkthaftungsrecht a ↗ |
| Die Deutsche Kreditwirtschaft | DE | . Weekends and public holidays should be excluded from the calculation of the deadline in order to meet the legal requirements. - Article 25 (data protection by design) of the GDPR only refers to data controllers, but not to manufacturers. This forces data con ↗ |
| Hangzhou Hikvision Digital Technology Co.,Ltd. (Hikvision) | CH | trate product compliance with specific GDPR requirements, such as data protection by design and by default principles outlined in Article 25 (1) and Article 25(2) GDPR. ↗ |
| Berufsverband der Datenschutzbeauftragten Deutschlands (BvD) e.V. | DE | gezeigt, dass es notwendig ist, Art. 25 Abs. 2 DSGVO endlich zu einem wirksamen Instrument des Datenschutzes zu machen. Dazu ist es zwingend erforderlich, den Hersteller in den Adressatenkreis der Norm aufzunehmen und damit die derzeit bestehende Haftungslücke ↗ |
| AUSTRIAN FEDERAL ECONOMIC CHAMBER | AT | nnovation and to new technologies? The GDPR does not prevent new technologies. However, there could be improvements. For example, Art 25 GDPR only sees the controller in obligation to implement data protection through privacy by design and default settings. Ho ↗ |
| Insurance Ireland | IE | ns with particular regard to decisions adopted pursuant to Article 45(3) of this Regulation and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC; and • Chapter VII on cooperation and consistency. ↗ |
| Anonos Inc. | US | ous under Recital 26 rather than Pseudonymous under Article 4(5). • Satisfy Data Protection by Design and by Default Obligations [Article 25] a. Article 25(1) requires data controllers - for both primary and secondary processing - to “implement appropriate tec ↗ |
| noyb | AT | t, that the file is complete, that the rights of the parties are respected. The Rapporteur shall present the matter to the Board. Article 25 - Decision of the Board ↗ |
| Fundamental Rights European Experts Group (FREE-Group) | BE | decisions adopted on the basis of Article 25(6) of Directive 95/46/EC; (b) Chapter VII on cooperation and consistency. However, the review required under Article 97(1) is manifestly broader than the report mentioned in the call – which oddly does not mention A ↗ |
| Information Technology and Innovation Foundation (ITIF) | US | their wording and in their raison d’être. Consequently, data transfers would need to be prohibited towards China, on the basis of Article 25 of the EU 1995 Data Protection Directive. ↗ |
| Digitale Gesellschaft e.V. | DE | y missing on the European market. Manufacturers must be obliged to implement data protection by design and by default mechanisms (Article 25) as well as security mechanisms (Article 32) into ICT systems to enable end-users to protect their fundamental rights a ↗ |
| Deutsche Vereinigung für Datenschutz e.V. | DE | Auge gefasst werden. Datenschutz durch Technikgestaltung und durch datenschutzfreundliche Voreinstellungen Die Anforderungen des Art. 25 DSGVO sind nur an die Verantwortlichen adressiert. ↗ |
| Gesamtverband der Deutschen Versicherungswirtschaft e.V. | DE | e proportionality for de- termining the appropriate TOMs. Instead, it interprets the refer- ence to the cost of implementation in Article 25 GDPR such that the controller must always have the financial means nec- essary to achieve the state of the art. In it ↗ |
| EFPIA | GB | 1/20/EC, Art. 6(3)(g). xix Id. Art. 5(1)(c). xx Directive 95/46/EC, Art. 12. GDPR, Art. 15 (access) and 20 (portability). xxi Id. Art. 25(2) Directive 95/46/EC and Art. 45 GDPR. xxii Id. Art. 26(2) Directive 95/46/EC and Art. 46 GDPR. xxiii Id. Art. 26(1) Dire ↗ |
| Federation of Austrian Industries (Industriellenvereinigung) | AT | ly congruent with Art 14 regarding content. The exception of professional secrecy should therefore also be included in Art 15. f. Art 25 – Data Protection by Design and by Default The definition of Data Privacy by Default is not clear; especially the compariso ↗ |
| Council of the Notariats of the European Union (CNUE) | BE | ement technical and organisational measures guaranteeing a level of security appropriate to the risk applies to the subcontractor Art 25: the subcontractor is not subject to privacy by design nor to privacy by default. Recital 78 provides only for an incentive ↗ |
| E.ON | DE | and/or investigate. An extension of the window that factors in these challenges would be welcome. 4. Data protection by design (Art 25): Under the current rules the requirement for “Data protection by design” are directed towards the data controller. However ↗ |
Source: public consultation submissions and position papers. n = 34 mentions; counted as a literal reference to the article number.