An Agile Framework for Building GDPR Requirements into SDLC
summary
Claims a vendor-agnostic, tag-based toolkit that encodes GDPR clauses into 14 tag classes and variants, mapping articles (e.g., Article 7 consent/withdrawal, Article 15 access, Article 17 erasure, Article 34 incident reporting) to Agile user stories and tasks. It generates a Scrum template and can audit an existing backlog by using JIRA labels and a Python script to link tasks to regulations. Case study builds requirements for a smart-bracelet IoT (consent UI, monitoring, breach notification) and provides downloadable user-story and task handouts; fines cited up to 20M EUR.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:57Overview
- 7:20Traditional Software Lifecycle
- 9:35Problem with this approach
- 10:55Challenges
- 12:35Types of Tasks
- 13:55Privacy Security Tasks
- 15:00Tagging
- 17:57Examples
- 23:28Template
- 24:38Report
- 25:27Tag
- 27:42Smart Bracelet Example
- 32:45Summary Slides
related talks
23mTransitioning GDPR from a Compliance Checklist to “Business as Usual”
54mEuropean Vacation: Leveraging GDPR for Security
46mGDPR Compliance Tools
01h 00mPrivacy and GDPR: What all developers should know
01h 15mExploring the lands of GDPR, DSA and DMA: Using the consent umbrella when it’s raining with data
43mGDPR for web development
47mKeynote: Are You Ready for GDPR?
01h 15mAcademic Session I The GDPR within a continuously reforming digital environment