A development team is building a new customer-facing mobile application that will collect location, contact, and payment data. To align with data protection principles, the privacy officer insists that privacy safeguards be embedded from the earliest design phases rather than added after the product is functional. Which principle is the privacy officer primarily applying?