Integrated data protection (Privacy by Design) is a GDPR requirement that mandates embedding data protection measures into systems from the earliest stages of development. It also includes the Privacy by Default principle, meaning that systems should be configured to protect personal data by default and collect only what is strictly necessary. These principles help reduce data exposure risks and enhance user privacy.