General Data Protection Regulation\nFollowing the Data Protection Directive of 1995\nePrivacy Directive of 2002 (cookie law)\n\nArticles\nhttps://www.smashingmagazine.com/2018/02/gdpr-for-web-developers/\nhttps://www.theverge.com/2018/3/28/17172548/gdpr-compliance-requirements-privacy-notice\nGeneral Data Protection Regulation \n\nEU Site:\nhttps://www.gdpreu.org/ \n\nPrivacy by Design \nhttps://www.smashingmagazine.com/2017/07/privacy-by-design-framework/\n\nQuestions\n\t\u2022 What?\n\t\u2022 Why?\n\t\u2022 Who is affected ? \n\t\t\u25cb Am I a controller?\n\t\t\u25cb Am I a processor?\n\t\u2022 What data is included in protection? \n\t\u2022 What protection is required? \n\t\u2022 What to protect against? What consent is required? \n\t\u2022 What are the penalties? \n\n\nPrivacy Impact Assessments\nA Privacy Impact Assessment (PIA), which is required under GDPR for data-intensive projects, is a living document which must be made accessible to all involved with a project. It is the process by which you discuss, audit, inventory, and mitigate the privacy risks inherent in the data you collect and process.\nLike all GDPR documentation, a PIA can be requisitioned by a data protection regulator in the event of a privacy concern or data breach. Not having a PIA is not an option.