davidevalerio

This plugin works alongside the free Complianz plugin to helps you keep a clear, reliable record of your visitors’ consents so you can stay on top of privacy rules and audits. It is designed specifically to save and manage consent records, making it ideal if you don’t need all the bells and whistles of Complianz Pro.
I built this plugin with care to give you a solid, easy-to-use tool that should meet GDPR requirements. However, it doesn’t guarantee full legal compliance, and none of its settings or descriptions should be considered legal advice.
That said, here’s why you’ll like this plugin:
<ul>
<li>Keeps user IDs anonymous so your visitors’ privacy is respected while staying compliant with data laws.</li>
<li>5-step wizard to get you started quickly.</li>
<li>Uses SHA-256 hashing to help ensure consent records cannot be changed or tampered with without being detected.</li>
<li>Lets you customize how you view consent records. You can show or hide details, pick custom dates, and see the full history of consents if you want.</li>
<li>Gives you advanced filters to find exactly the records you need.</li>
<li>Allows you to export all consent data, so you can keep a backup or review it offline.</li>
<li>Manages data with options to automatically clean up old records.</li>
<li>Thorough uninstall deletes all plugin data.</li>
</ul>
<h3>Legal Notice & Disclaimer</h3>
This plugin is provided “as is,” and the author makes no warranties, express or implied, regarding its accuracy, reliability, or legal compliance. By using this plugin, you acknowledge and agree that:
<ul>
<li>You are solely responsible for your compliance with GDPR, CCPA, and other applicable data protection laws.</li>
<li>You must update your website’s Privacy Policy to disclose the collection and processing of consent data.</li>
<li>You should regularly back up your data and keep your site well-maintained.</li>
<li>None of the settings or descriptions in this plugin should be taken as legal advice.</li>
<li>The author expressly disclaims any liability for damages, data loss, or other issues arising from the use, misuse, or reliance on this plugin.</li>
<li>You use this plugin at your own risk, and the author assumes no liability for any resulting consequences.</li>
<li><a href="https://www.paypal.com/donate/?hosted_button_id=7BQAL64REFATS" rel="nofollow ugc">Donations</a> are welcome to support ongoing development but do not imply any warranty or official support.</li>
</ul>

Record of Consent Extension for Complianz


I encourage everyone to create, build and improve where possible; this is a great example.The extension delivers what it promises; and feedback was well received.The plugin itself lives between the 'Proof of Consent' feature in Complianz Free - which respects a GDPR principle called data minimization by not collecting any personal data whatsoever and the premium feature in Complianz that does; but connects more information to the specific user and timestamped consent actions.A great addition to the repository.


This is why we love WordPress / Open-Source

Stores custom consent records triggered by Complianz events with compliance tracking and auditing capabilities.

Gopi Narayanaswamy

SG2 DPDP Compliance Toolkit is a comprehensive WordPress plugin designed to help Indian websites comply with the Digital Personal Data Protection (DPDP) Act, 2023. It provides tools for managing user consent, handling data subject rights (DSR) requests, generating dynamic privacy policies, and auditing compliance activities.
<h3>Key Features:</h3>
<ul>
<li>Consent Management Banner: A customizable cookie consent popup that allows users to manage preferences for data processing purposes (e.g., communication, analytics, marketing, strictly necessary). Supports multi-language (English, Hindi) and test mode for development.</li>
<li>Grievance Redressal Form: A secure form for users to submit DSR requests (access, correction, deletion of personal data). Includes email confirmation, rate limiting, and admin workflow for approval/rejection.</li>
<li>Privacy Policy Generator: Automatically generates a basic privacy policy based on your site settings, using templates for blogs or e-commerce sites. Easily customizable via shortcodes.</li>
<li>Admin Dashboard: Beautiful, responsive dashboard with metrics (total consents, pending requests), sub-pages for settings, logs, requests, audit trails, script manager, and exports (CSV/JSON).</li>
<li>Consent Logging & Audit: Logs all consents and actions to the database with IP/user agent hashing for privacy. View/export logs easily.</li>
<li>Shortcodes: Embed components easily:
<ul>
<li><code>[dpdp_grievance_form]</code>: DSR request form.</li>
<li><code>[dpdp_consent_status]</code>: User’s current consent status.</li>
<li><code>[dpdp_privacy_policy]</code>: Dynamic privacy policy.</li>
</ul>
</li>
<li>Script Manager: Block or manage third-party scripts based on consent (e.g., GA4, Facebook Pixel integrations via SDK).</li>
<li>Security & Performance: Rate limiting, nonces, sanitization, and GDPR-inspired best practices. No external dependencies beyond WordPress core.</li>
<li>SDK for Integrations: JavaScript SDK for advanced consent checks (e.g., <code>window.DPDP.getConsent()</code>).</li>
</ul>
The plugin auto-creates necessary database tables on activation and sets up default pages (Privacy Policy, Consent Status, Grievance Form). It’s lightweight, mobile-responsive, and follows WordPress coding standards.
<h3>Why SG2 DPDP Compliance Toolkit?</h3>
The DPDP Act mandates consent for personal data processing, data subject rights, and grievance mechanisms. This plugin simplifies compliance without needing custom development.
For support, visit <a href="https://sg2technologies.com/" rel="nofollow ugc">SG2 Technologies</a> or the <a href="https://wordpress.org/support/plugin/dpdp-compliance/" rel="ugc">WordPress.org support forum</a>.
<h3>External services</h3>
This plugin optionally uses third-party services for enhanced security and analytics. These are configurable and disabled by default. All integrations respect user consent where applicable.
<h4>Google reCAPTCHA (Optional, for Grievance Form)</h4>
Used for spam protection on the DSR request form. 
Data sent: User’s IP address and reCAPTCHA response token only when the form is submitted (if enabled in settings). No personal data is sent without form interaction. 
Why/When: To verify human submissions and prevent abuse; called via Google’s API on form POST. 
Provider: Google LLC. Terms: https://policies.google.com/terms. Privacy Policy: https://policies.google.com/privacy.
<h4>Google Tag Manager (GTM) (Optional, Consent-Based)</h4>
Used to load Google Analytics scripts based on user consent. 
Data sent: The GA tracking ID when the page loads (only if consent is given for analytics purposes). No personal data transmitted without consent. 
Why/When: For analytics tracking; loads dynamically after user consent via the Script Manager. 
Provider: Google LLC. Terms: https://marketingplatform.google.com/about/analytics/terms/us/. Privacy Policy: https://policies.google.com/privacy.
All services comply with DPDP consent requirements. Disable in settings if not needed.

DPDP Compliance

SG2 DPDP Compliance tools for WordPress: consent, data requests, retention rules, and audit-ready logs to help meet India’s DPDP requirements.

Record of Consent Extension for Complianz vs DPDP Compliance