How will GDPR impact app developers?

Data protection has become a hot topic recently as more consumers and internet users fall victim to security breaches. The mobile industry has seen the brunt of this problem and in 2016 alone, it was discovered that over 200 apps were exposing users’ personal data. The EU has decided to crack down with the introduction of the General Data Protection Regulation which is aimed at strengthening data protection. But what does this mean for app developers?

Data erasure

One of the main features of the GDPR is the right of users to request their personal data be deleted permanently. The new regulations will give mobile users the power to make data handlers and app developers erase their personal information and sensitive data. In addition to this, users can preemptively stop the publication of their data for any purpose outside of the initially agreed terms.

Data movement consent

Until now, the regulations around the movement of personal data have sat in a legally grey area but after the implementation of GDPR, app developers with users in the EU will not be able to collect, move or use personal data without explicit consent from users.

Notification of data breaches

In the wake of numerous high profile data breach cases, the EU is aiming to crack down on development companies and raise the standards of software security protocols across the board. Under the new rules, developers will be required to notify their users and the relevant authorities within 72 hours of a breach or face strict consequences.

Privacy by design

The idea of privacy by design is a concept that is already practised by reputable app development businesses, however, under GDPR rules, it will now be a legal requirement. This means that before, during and after the development stage, app creators must implement measures that restrict the unnecessary flow of user data and can only use information that is specifically required to complete the app.

Data Protection Officers

After GDPR comes into effect on 25 May, app developers will be required to keep detailed logs and internal records regarding data protection protocols and security breaches. These will be monitored regularly by relevant bodies to maintain consistency. Larger development companies will also be required to appoint Data Protection Officers whose job it will be to monitor data protection and ensure all regulations are being adhered to.