For a semester exam, which option is correct about privacy by design?

A. deleting privacy requirements B. collecting all data by default C. sharing data without consent D. embedding privacy protections into architecture and processes from the beginning