arena

GDPress is providing tools for privacy and more.
Major features in GDPress include :
<ul>
<li>a privacy request form</li>
<li>a menu in the admin_bar to see at once confirmed privacy requests</li>
</ul>
and since version 2.0 a set of tools to help you comply with GDPR 
* a set of protection and wellness tools, because protecting personal data starts with a healthy and protected installation to prevent potential data breach. 
* a RoPA assistant to help you building your Records of Processing Activities – a GDPR obligation (Article 30). 
* a logging of all events related to export/erase requests by/for the data subject (see settings page). 
* a specific wp role for dpo. 
* and a dedicated Privacy/GDPR/ISO27701 dashboard for your d.p.o. !
GDPR compliancy is a never ending process.
<h3>Technical Details</h3>
n/a
<h3>Privacy</h3>
GDPress is not calling any external web services 
and is not using any external software other than WordPress core.
GDPress stores events related to the data subject and core privacy processes if archive setting is set. 
Archives are under the authority of the Data Protection Officer for legal purpose ONLY. 
They are retrieved to the data subject, but not deleted.
<h4>Accountability/Auditability</h4>
These are legal obligations in GDPR. In front of your local data protection authority or a judge : 
* You are accountable of your actions to reach GDPR compliancy and must prove it (activating this plugin is not enough). 
* If sued, you will have to provide some evidence : you acted lawfully and replied to the request of the data subject (archive all activities for Legal Purpose is allowed in GDPR and must be declared in your Records of Processing Activities).
<h4>Other Major Obligations</h4>
<ul>
<li>Records of Processing Activities, expecting WordPress team to publish it for core. And for any theme or plugin, adding a new Privacy Section in readme.txt is a must do.</li>
<li>Communication of a personal data breach to the data subject (and to your local D.P.A.)</li>
</ul>
<h4>Privacy by design</h4>
This concept is in GDPR too. In wp, Privacy is a component like Gutenberg, Admin, wp-cron … 
Privacy by design is or should be declined and included in ALL wp components. Should all components publish their “Privacy Section” just like the above recommandation for themes and plugins ?
<h4>Pending Questions</h4>
<ul>
<li>Privacy settings in core : only one setting on a unique page that cannot be amended (no hook) : the privacy policy page</li>
<li>any privacy request is a personal data and should be retrieved to the data subject</li>
<li>removing an export request do not delete the export file (security issue, potential data breach)</li>
<li>external processors to be identified (privacy by design)</li>
<li>Gutenberg blocks coherence with embed handlers and oembed providers as set on the server side (privacy by design)</li>
<li>oEmbed responses cached in transients (no more postmeta html cached) for blog posts or oembed providers (privacy by design)</li>
<li>ability to remove blocks in Gutenberg such as “/map” for Mapbox (privacy by design)</li>
<li>future “Icon” component : from Dashicons to svg (privacy by design)</li>
<li>Nowadays, emails such as “θσερ@εχαμπλε.ψομ” are valid but rejected by wp function is_email() (privacy requests rejected) 
Web standards should apply and this can be a legal issue : one of the “variety of privacy issues around the world” !</li>
</ul>

GDPress

good

Whodunit

Jb Audras

Konstantinos Xenos

This plugin uses WordPress Core tools for GDPR Compliance.
Since release 4.9.6, WordPress admin has some tools to handle Privacy User Requests. Administrators are able to create Data Request for every users in order to send or erase users data. This plugin allow website administrators to display Data Request Forms in front-end, for example in your Privacy Policy Page.
Easily integrate a Personal Data Request Form for your visitors/users in front-end, with some options: 
– Personal Data Export 
– Personal Data Erasure 
– Both of them
It’s easy to integrate:
<ul>
<li>
Widget 
The widget allows to integrate Data Request Form in your theme widget areas. It comes with three options: Form Title, Form Description Paragraph and Form Type.
</li>
<li>
Gutenberg Block (since 1.4!) 
The Gutenberg Block makes it even easier to integrate front-end forms in your website. The block allows you to choose the type of form you need.
</li>
<li>
Shortcode 
[gpdr-data-request] shortcode allows to integrate Data Request Form where you need. This shortcode has no parameter.
</li>
<li>
PHP Function 
echo gdrf_data_request_form( $args ) function allows to integrate Data Request Form where you need. This function has some parameters and filters (see FAQ section below). Don’t forget to <code>echo</code> the function.
</li>
</ul>
GDPR Data Request Form is using AJAX to provide clean and user-friendly forms in front-end. You can integrate them in any page of your website (like your Privacy Policy Page) or in your sidebar/footer.
The email address of the Data Protection Officer (DPO) can be changed in the Privacy Settings screen (Settings > Privacy).
Data Request Workflow:
<ul>
<li>The user/visitor use your Personal Data Request Form to ask for Personal Data Export or Erasure.</li>
<li>A request is created in WordPress Tools > Export/Erase personal data.</li>
<li>An email is sent to the user/visitor to confirm this request.</li>
<li>The user request is set to Confirmed in Tools > Export/Erase personal data.</li>
<li>An email is sent to the website administrator to validate the request.</li>
<li>The personal data are sent by email to the user/visitor (as a 3-day available download link), or erased, depending on the user request type.</li>
</ul>

GDPR Data Request Form

I use on some sites, and I think it's really a fantastic plugin.

Thanx

I really love this plugin

An essential extension for those who want to comply with the GDPR. Not having this functionality in the Core is nonsense.

Essential.

Use WordPress Core GDPR tools to build front-end Personal Data export/erasure forms (includes Widget, Gutenberg Block, shortcode & Hooks).

GDPress vs GDPR Data Request Form