With GDPR you must take security into account from the design. If you don't do this, the customer DPO might stop the project anytime, or you would have to undo

With GDPR you must take security into account from the design. If you don't do this, the customer DPO might stop the project anytime, or you would have to undo all the reso it again untilt the DPO approves it.