I am working on a new blog post: Privacy by design vs. privacy by paperwork. I have felt for some time that I needed to work out the difference in more detail.