In addition to their role as designers of data protection, software developers and IT employees are also data subjects themselves whose data are collected and processed, for example, in development tools. Cloud-based tools and communities are becoming increasingly important, which may then fall under the requirements for commissioned processing. This chapter therefore provides an overview of the most important systems in which developer and IT employee data may be collected and how it should be handled. This description is supplemented by a summary of the procedure and explanation of the most important measures for implementing data protection within a development or IT organisation.