Effective data protection by design through interdisciplinary research methods: The example of effective purpose specification by applying user-Centred UX-design methods

While the recent discussion on Art. 25 GDPR often considers approach of data protection by design as an innovative idea, notion making law more effective through requiring controller to implement legal norms into processing is almost old debate. However, there another, shift in establishing law, which not yet understood its fullest extent requires only but do so manner. By explicitly declaring effectiveness measures be legally required result, legislator inevitably raises question methods can used test and assure such efficacy. In our opinion, extending compatibility assessment real effects opens this interdisciplinary methodologies. paper, we first summarise current state research methodology established sect. 1 GDPR, pinpoint some challenges incorporating On premise, present empirical findings offer one answering how specify purposes effectively. Lastly, discuss implications these for interpretation related provisions, especially with respect a implementation transparency consent, provide outlook possible next steps.