Extension of MMSP methodology by GDPR requirements

The thesis deals with the issue of personal data and privacy in the field of software development. The main goal of this work is to extend the Methodology for small software projects to take into account the requirements of the GDPR Regulation (General Data Protection Regulation). The work maps the current state of GDPR in software development from the point of view of ISO standards, methodologies, projects and literature, and on the basis of this knowledge proposes modifications and extensions of existing objects or new methodology objects. Within the work, three new roles (e.g. Data protection officer), twelve new tasks (e.g. System and infrastructure security) and three new work products (e.g. Description of database security) were created. The existing roles were then extended by new activities and the required skills were expanded so that the persons performing these roles were able to perform the relevant processes and meet all legislative requirements.The contribution of the work is the creation and publication of an extension of the methodology, which can be used in practice in the development of smaller software products that meet current legislative requirements.