Article 25 of the GDPR states that data collection, processing and management measures should be implemented following tnhe privacy by design and privacy by default paradigms. This paper presents a systematic literature review to identify useful guidelines to support the development of GDPR-compliant software. Selected papers are categorized under 8 different data-oriented and process-oriented strategies and their contributions are reported. Future activities will highlight the HCI community's attitude towards these new technical and organizational approaches in order to bridge the identified gaps and shortcomings.
展开▼
