GDPR and AI-Generated Code: What Data Leaves the Machine?

GDPR Article 25 requires privacy by design — not compliance bolted on after the fact, but technical measures baked into systems at design time. Most of that obligation falls on the software you write.