top of page

GDRP is forcing Secure Software Development practices

Updated: Mar 21, 2022

General Data Protection Regulation (GDPR) will come into force on 25th May 2018. It applies to any organization that holds or processes personal information of any European citizen and it’s important to know that the term personal information has been widened to anything that could identify citizens such as IP Address or cookies.

Organizations which suffers a data breach are liable to be fined up to 4 % of their global annual revenue or 20 MIO €, whichever is larger.

Security by design

As a best practice you should re-think your software development approach and switch to a secure software development life cycle (SDLC) which reflects both, privacy and security throughout the whole development chain. Review the BSIMM secure software framework, which is a good starting point and allows a step-by-step improvement of your secure software development maturity level over time.

Furthermore, GDPR is all about how you manage personal information. I don’t want to repeat all details clearly outlined by responsible bodies. As a starting point, it’s a good advice to make sure that the below pullet points are properly addressed in your organization.

  1. Build awareness

  2. Build accountability

  3. Review current data privacy notices

  4. Review privacy rights

  5. Access requests

  6. Customers Consent

  7. Children’s Data

  8. Reporting data breaches

  9. Data Protection Officer

Read more details under

May 25th is the deadline to be compliant to this GDPR regulation. My advice is to use the remaining few weeks and transform your development process towards security.

8 views0 comments


bottom of page