Use this checklist to ensure GDPR compliance on your software development project:
Use a pseudonym Keep real personal data in a separate area of storage or memory and process each person by that reference name rather than by actual identifiers – a username would work as a pseudonym.
Create feedback channels Include a feature in your app that enables users to request that all of their personal information is removed from the system. This should also allow them to demand that their data is transferred to another organization.
Data breach tracking and reporting Your system should be secure. However, you should also have procedures in place in case of unauthorized disclosure. You must inform users and law enforcement within 72 hours of a data breach. So, have data loss protection in place in your app and make sure it includes retrospective event auditing.
Privacy by default Default everything to be as anonymous as feasibly possible.
Informed consent Get the users to express consent to any data storage event – the consent can be a single action at the beginning of your relationship with them.