Skimming, looks like a lot of these are generally good ideas regardless of GDPR. For instance: "Assess the value of adding each dependency. Some commonly used

Skimming, looks like a lot of these are generally good ideas regardless of GDPR. For instance: "Assess the value of adding each dependency. Some commonly used software bricks are only a few lines long. However, each added element is an increase in your system’s attack surface. In the case where a single library offers several functionalities, integrate only the functionalities you actually need. By activating the minimum number of functionalities, you reduce the number of potential bugs that could occur." The context is that an external library can mishandle personal info, but this is true even if you didn't care at all about security and privacy.