GDPR compliant software development