Privacy by Design & by Default Assessment