united-kingdom software gdpr
What is my responsibility related to GDPR as a Freelance developer
<p>I'm a Software Engineer, and I've just taken my first &quot;side gig&quot; job in hopes of becoming Freelance one day. I'm based in the UK. My Client told me exactly what they want, and i've built it. However, I am now growing concerned about the accountability I have under the GDPR. I believe my Client is unaware of how strict GDPR is (personally I was until I started my research today).</p>
<p>So, it seams that to be GDPR compliant, i'd need to add several features to the software. The problem is, these are of course features the Client has not asked me for. I will highlight it to them, but if they say no (As, it might sound like me just asking to write more code for more money), what can I do? If I am liable, then I'm let with no choice but to cancel the job.</p>
<p>The software is a CRM for B2B email and telephone marketing, but it holds the information of persons who work at the target businesses. I have an &quot;unsubscribe&quot; feature for the emails, but that's all.</p>
<p>I hope someone can help, or point me towards it.
Thanks</p>

<h1>On the facts you've given us, you have obligations and potential liability as a processor of the data</h1>
<p>You're responsible for the security of the data in the database, maintaining records, appointing a data protection officer if necessary, and so on.</p>
<p>You can be held liable for any breaches by the ICO or other relevant regulatory authority, and an injured party might bring an Article 82 claim against you if you  failed to comply with GDPR provisions specifically relating to processors or you acted without the controller’s lawful instructions or against those instructions.</p>
<p>The Information Commissioner's Office have a <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/contracts-and-liabilities-between-controllers-and-processors-multi/responsibilities-and-liabilities-for-processors-in-their-own-right/" rel="nofollow noreferrer">helpful guide to processor liabilities in a contract</a> which I strongly recommend reading. There is a more detailed <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/controllers-and-processors/what-does-it-mean-if-you-are-a-processor" rel="nofollow noreferrer">guide on the liabilility of processors under the GDPR</a> generally which I also strongly recommend reading.</p>
<p>These two guides should hopefully address your concerns.</p>
