Towards the integration of the GDPR in the unified software development process

Abstract

The General Data Protection Regulation (GDPR) is the core of digital privacy legislation across Europe (EU), and it applies to processing carried out by organisations operating within and outside the EU that offer goods or services to individuals in the EU, including software products. Nevertheless, software teams are generally unaware of the legal requirements for personal data protection and its application throughout the software life cycle. In this paper, we propose a comprehensive guidance to integrate compliance with GDPR requirements within the Unified Software Development Process (UP) across the entire lifetime.