Article 17 EU GDPR \"Right to erasure ('right to be forgotten')\"<\/a><\/p>\n\nUser data downloading<\/h3>\n\n
Plugin by default downloads WordPress data and WooCommerce private data. You can add additional data to json array by running an action.<\/p>\n\n
function yourFunctionName(&$data){\n \/\/ Gather your data for current user\n $userData = array(\n 'some_sample_data' => 'This is probably retrieved from database',\n 'some_other_data' => 'Some other data you offer in download.',\n 'notice_for_devs' => 'Please be sure to get all user data in your system'\n );\n $data['custom_user_data'] = $userData;\n} add_action('dd_gdpr_userdata_additional', 'yourFunctionName');<h3>Newsletter Consent Installation<\/h3>To enable newsletter consent PDF creation modify the code in you plugin or theme functions.php to include calls to action\n\ndo_action('dd_gdpr_newsletter_subscribe_pending', $email_address, (new \\DateTime())->format('Y-m-d H:i:s'), $ip);\ndo_action('dd_gdpr_newsletter_subscribe_confirmed', $email, $firedAt, $ip);\n<\/code><\/pre>\n\nOur example below which integrates MailChimp for WordPress and uses Mail Chimp Webhook to confirm registration<\/p>\n\n
function init(){\n add_action('mc4wp_form_subscribed', [$this, 'newsletter_subscribed'], 10, 4);\n add_action('parse_request', [$this, 'parse_mailchimp_webhook']);\n}\n\nfunction newsletter_subscribed($form, $email_address, $data, $map) {\n \/\/ Create PDF for consent proving\n $status = $map[array_keys($map)[0]]->status;\n $ip = $map[array_keys($map)[0]]->ip_signup;\n if ($status === 'pending') {\n do_action('dd_gdpr_newsletter_subscribe_pending', $email_address, (new \\DateTime())->format('Y-m-d H:i:s'), $ip);\n } else if ($status === 'subscribed') {\n do_action('dd_gdpr_newsletter_subscribe_confirmed', $email_address, (new \\DateTime())->format('Y-m-d H:i:s'), $ip);\n }\n}\n\nfunction parse_mailchimp_webhook() {\n if($_SERVER['REQUEST_URI'] != '\/mailchimp_webhook') {\n return;\n }\n\n $type = $_POST['type'];\n if ($type != 'subscribe') {\n return;\n }\n $firedAt = $_POST['fired_at'];\n $email = $_POST['data']['email'];\n $ip = $_POST['data']['ip_signup'];\n do_action('dd_gdpr_newsletter_subscribe_confirmed', $email, $firedAt, $ip);\n exit();\n}\n<\/code><\/pre>\n\n\n\n- Upload the plugin files to the
\/wp-content\/plugins\/<\/code> directory, or install the plugin through the WordPress plugins screen directly.<\/li>\n- Activate the plugin through the 'Plugins' screen in WordPress<\/li>\n
- Use the Settings->GDPR screen to configure the plugin<\/li>\n
- Modify permisions for \/wp-content\/newsletter_consents and \/wp-content\/enc_keys to be writtable by the web server user<\/li>\n<\/ol>\n\n\n
\n- Installation Instructions<\/dt>\n
\n- Upload the plugin files to the
\/wp-content\/plugins\/<\/code> directory, or install the plugin through the WordPress plugins screen directly.<\/li>\n- Activate the plugin through the 'Plugins' screen in WordPress<\/li>\n
- Use the Settings->GDPR screen to configure the plugin<\/li>\n
- Modify permisions for \/wp-content\/newsletter_consents and \/wp-content\/enc_keys to be writtable by the web server user<\/li>\n<\/ol><\/dd>\n
- Why store encryption key as file?<\/dt>\n
GDPR Article 17 requires that all data be removed, even from backups. If SQL file backups contain the key in database, private information is accessible by just restoring that data. When using encryption as key personal data in the SQL file backups are not readable without it. When removing the user or forgetting his data, removal of the key file makes the data in backups void (unable to be read as we dont have key anymore). Our recommendation is to configure backup system to exclude the keys in regular backups and just synchronize the keys with rsync on the backup server with option to match delete actions in keys folder. Also it improves security by requiring potential hacker to have access to both database and filesystem.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.0.4<\/h4>\n\n\n- Added checks for required folders before enabling encryption<\/li>\n<\/ul>\n\n
1.0.3<\/h4>\n\n\n- Added check to generateKeys<\/li>\n<\/ul>\n\n
1.0.2<\/h4>\n\n\n- Fixed required PHP and WordPress version. Added image assets.<\/li>\n<\/ul>\n\n
1.0.1<\/h4>\n\n\n- Fixed install instructions<\/li>\n<\/ul>\n\n
1.0<\/h4>\n\n\n- Code reorganisation and better compatibility<\/li>\n<\/ul>\n\n
0.9<\/h4>\n\n\n- First public release<\/li>\n<\/ul>","raw_excerpt":"This plugin helps with upcoming General Data Protection Regulation (GDPR) by enabling pseudonimization of personal data and storing the newsletter sub …","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/83361","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=83361"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/zeddivert"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=83361"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=83361"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=83361"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=83361"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=83361"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=83361"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}