Secure by Default

A foundational principle in security engineering emphasizing that a system's initial state should be its most secure configuration, and that any operation reducing security requires the user's explicit informed consent. It was later incorporated into the legal framework by Article 25 of the GDPR, and complements the principle of Privacy by Design.