A software company is developing a new customer analytics platform that will process personal data. The privacy officer wants to ensure privacy considerations are built into the product from the outset rather than added later. At which point in the development lifecycle should privacy requirements FIRST be integrated to best align with privacy-by-design principles?