Implementing GDPR: A perspective from developers

This study examines the changes in the implementation of Privacy by Design in software products from developers’ perspectives six years after the enforcement of the General Data Protection Regulation (GDPR). Through semi-structured interviews with nine experts from seven different companies, we found that while the volume of data collected has not decreased, organizations have become more cautious. This increased caution is driven not only by stringent regulations but also by market and user demands. The study highlights the nuanced impact of the GDPR on data collection practices and the evolving role of developers in ensuring compliance and data protection.