DPDP Compliance

SG2 DPDP Compliance Toolkit is a comprehensive WordPress plugin designed to help Indian websites comply with the Digital Personal Data Protection (DPDP) Act, 2023. It provides tools for managing user consent, handling data subject rights (DSR) requests, generating dynamic privacy policies, and auditing compliance activities.

Key Features:

• Consent Management Banner: A customizable cookie consent popup that allows users to manage preferences for data processing purposes (e.g., communication, analytics, marketing, strictly necessary). Supports multi-language (English, Hindi) and test mode for development.
• Grievance Redressal Form: A secure form for users to submit DSR requests (access, correction, deletion of personal data). Includes email confirmation, rate limiting, and admin workflow for approval/rejection.
• Privacy Policy Generator: Automatically generates a basic privacy policy based on your site settings, using templates for blogs or e-commerce sites. Easily customizable via shortcodes.
• Admin Dashboard: Beautiful, responsive dashboard with metrics (total consents, pending requests), sub-pages for settings, logs, requests, audit trails, script manager, and exports (CSV/JSON).
• Consent Logging & Audit: Logs all consents and actions to the database with IP/user agent hashing for privacy. View/export logs easily.
• Shortcodes: Embed components easily:
  • [dpdp_grievance_form]: DSR request form.
  • [dpdp_consent_status]: User’s current consent status.
  • [dpdp_privacy_policy]: Dynamic privacy policy.
• Script Manager: Block or manage third-party scripts based on consent (e.g., GA4, Facebook Pixel integrations via SDK).
• Security & Performance: Rate limiting, nonces, sanitization, and GDPR-inspired best practices. No external dependencies beyond WordPress core.
• SDK for Integrations: JavaScript SDK for advanced consent checks (e.g., window.DPDP.getConsent()).

The plugin auto-creates necessary database tables on activation and sets up default pages (Privacy Policy, Consent Status, Grievance Form). It’s lightweight, mobile-responsive, and follows WordPress coding standards.

Why SG2 DPDP Compliance Toolkit?

The DPDP Act mandates consent for personal data processing, data subject rights, and grievance mechanisms. This plugin simplifies compliance without needing custom development.

For support, visit SG2 Technologies or the WordPress.org support forum.

External services

This plugin optionally uses third-party services for enhanced security and analytics. These are configurable and disabled by default. All integrations respect user consent where applicable.

Google reCAPTCHA (Optional, for Grievance Form)

Used for spam protection on the DSR request form.
Data sent: User’s IP address and reCAPTCHA response token only when the form is submitted (if enabled in settings). No personal data is sent without form interaction.
Why/When: To verify human submissions and prevent abuse; called via Google’s API on form POST.
Provider: Google LLC. Terms: https://policies.google.com/terms. Privacy Policy: https://policies.google.com/privacy.

Google Tag Manager (GTM) (Optional, Consent-Based)

Used to load Google Analytics scripts based on user consent.
Data sent: The GA tracking ID when the page loads (only if consent is given for analytics purposes). No personal data transmitted without consent.
Why/When: For analytics tracking; loads dynamically after user consent via the Script Manager.
Provider: Google LLC. Terms: https://marketingplatform.google.com/about/analytics/terms/us/. Privacy Policy: https://policies.google.com/privacy.

All services comply with DPDP consent requirements. Disable in settings if not needed.

1. Upload the dpdp-compliance folder to the /wp-content/plugins/ directory of your WordPress site.
2. Activate the plugin through the ‘Plugins’ menu in WordPress.
3. (Optional) Configure settings via DPDP > General (e.g., company name, DPO email, consent purposes).
4. Add shortcodes to pages/posts:
   • Grievance Form: [dpdp_grievance_form]
   • Consent Status: [dpdp_consent_status]
   • Privacy Policy: [dpdp_privacy_policy]
5. The consent banner appears automatically on frontend (customize in DPDP > Banner).
6. Visit DPDP > Dashboard to view metrics and manage logs/requests.

The plugin creates default pages automatically. Test in a staging environment first.

2.1.1

• Updated documentation for external services (reCAPTCHA, GTM) to meet WP.org guidelines.
• Fixed contributors list and short description for readme compliance.
• Minor tweaks to installation and FAQ for clarity.

2.1.0

• Initial public release.
• Added Script Manager for third-party integrations.
• Improved admin UI with gradients and responsive design.
• Enhanced grievance form with purple header styling.
• Added rate-limiting to consent logging.
• Multi-language support for banner and forms.
• SDK for GA4/Facebook consent updates.

2.0.0

• Core features: Consent banner, DSR forms, policy generator.
• Database tables for consents, requests, audits.
• Admin sub-pages for all management.
• Shortcodes and auto-page creation.

1.0.0

• Prototype: Basic banner and logging.