Early lessons learned in the ENDORSE project: Legal challenges and possibilities in developing data protection compliance software

Abstract

Software can help businesses comply with data protection regulation. The development of such compliance software may be desirable because data protection compliance is difficult or burdensome to achieve, and especially for small and medium enterprises. Building software capable of providing proper legal guidance, or even enforcing the law, is, however, non-evident. This paper addresses some of the complexities and opportunities involved in the development of such software from a legal perspective. The paper focuses on the identification of relevant regulation, legal norm conflicts and the implementation of open norms in software. © 2012 IFIP International Federation for Information Processing.