Process and Tool Support for Integration of Privacy Aspects in Agile Software Engineering

The General Data Protection Regulation (GDPR) poses a multitude of challenges to companies on the legal, business and technical level. Almost two years after the regulation entered into force, a series of significant fines were issued because of insecure data processing. We claim that incorporating adequate measures for data protection is a challenge for software developers and that a lightweight approach to support this goal can be beneficial. This short paper proposes an approach for integrating privacy aspects in agile development methods and outlines a prototype as tool support for this approach.