Data protection has been one of the buzzwords within the last years. But the legal issues are just getting started. With the new General Data Protection Directive in effect and applicable from May next year the legal requirements for apps have already changed. But the additional new e-privacy-directive is on its way and will be a "gamechanger". Not to obey privacy by design and privacy by default will not be an option in the future.