As potential attacks evolve every day and become more inventive, it is critical to properly define and set up information security within our company. Hrvatski Telekom achieves the same by implementing the "security by design" principle. The security aspect of our products and services is the result of the teamwork of all of us, but also our great competitive advantage. Adequate security of data and information, their integrity, availability and confidentiality are extremely important, and are ensured by the implementation of numerous security measures, through three basic links in the security chain - people, processes and technologies. We have implemented and applied the PSA procedure which ensures "privacy by design" and "security by design" approach, which means that we incorporate all relevant requirements for personal data protection and security in the products and services of Hrvatski Telekom from the very beginning.