More surveillance doesn't mean better integrity; in Europe, it increasingly means legal risk. This hands-on session helps assessment professionals design their way out of the privacy-vs-security trap. Through a structured group exercise, participants will audit a real assessment workflow for GDPR proportionality, identify where data collection exceeds what integrity requires, and leave with a privacy-first design framework they helped build. Practical and directly relevant to anyone running remote or hybrid assessment under European data protection law.