Privacy considerations

Take into account privacy regulations (e.g. GDPR) in design and review of code. Personal data requires special handling in order to comply with regulations and to respect the rights of data subjects (i.e.the persons that the data refers to). Personal data is any kind of data that can be used alone, or in combination with other data, to identify a physical person. For example the following types of data are classified as personal data:

If you are dealing with data that relates to users and you are not sure if they should be classified as personal data raise the issue to management so that the risk of non-compliance is reduced.

Some practical tips: