Developer view on new EU privacy legislation (GDPR)

The General Data Protection Regulation (GDPR) is out there and there's a lot of people trying to interpret it. It's a complicated piece of legislation, built together after fierce lobbying and a lot of compromises. The end result leaves a lot of things open. What's new in it, are the direct requirements for the processors of the data. If you're a maintainer of your client's Drupal site, you used to not have any direct requirements set by law, but everything was the burden of the controller. This changes in 2018.

In this session we'll go through the main items on the legislation from a Drupal developer point-of-view. The speaker is not a lawyer, and the session will not contain any legal advice, but a view on what a Drupal developer might expect coming to her table during the next couple of years. Please remember that there's a lot to interpret in the legislation and the interpretations as well as the upcoming supplementary local legislation could vary a lot between EU countries.

The key items of the presentation are: