The term 'privacy-by-default' in data protection refers to the principle that organizations must ensure privacy settings are set at the highest level by default. This means individuals' personal data should be automatically protected without requiring them to actively change settings. It emphasizes the importance of user consent and aims to limit exposure of personal data unless the user explicitly chooses otherwise. Privacy-by-default helps organizations comply with regulations like GDPR, fostering a culture of respect for users’ privacy and enhancing trust in digital services.