• jamesford25

    (@jamesford25)


    Is this plugin inline and does it meet the EU General Data Protection Regulations?

Viewing 4 replies - 1 through 4 (of 4 total)
  • rctomcat

    (@rctomcat)

    What exactly are you concerned about?
    Users can register. The data that you require them to enter in order to be able to register is up to you and should be kept to the minimum in order to be compliant.
    I don’t see a GDPR Problem for the plugin as it is totally up to you what user data you collect and what you do with it.

    Edit>
    A short google search might have shown you this
    https://rocketgeek.com/blog/wp-members-and-gdpr-compliance/

    • This reply was modified 7 years ago by rctomcat.
    Thread Starter jamesford25

    (@jamesford25)

    I wasn’t refering to what information I can take, I am aware and upto date on the regs and I have seen and read the link you have provided. I have been researching for a few days prior to this post.

    I was refering to the way in which the plugin stores the data in the database.
    Does it, as advised, encrypt and secure the data in any way or does it store it in plain text?

    rctomcat

    (@rctomcat)

    A wordpress DB is not encrypted except for the password.
    As far as i can tell there is no encrypted data being stored. But what would you want to encrypt? It makes little sense to encrypt data which is frequently used on a system that does not provide native encryption. A name or an email are not something that justify the effort it would take for you to implement a third party solution.
    You would also need to save the encryption key either in a file or in the database itself so wordpress could access the user data if needed. So anyone who would gain access to the db or your webserver would also get the key.
    Here is a link where someone asks the same question about wordpress dbs in general
    https://ww.wp.xz.cn/support/topic/how-can-i-encrypt-user-data-in-database/
    Amazon RDS does provide encryption of the database itself but acts as if it was not encrypted to an authenticated user. So maybe that might be a solution for you.

    I assume Chad could say more about how his plugin works but if it would encrypt anything he would have stated it on the page i linked in the previous post

    • This reply was modified 7 years ago by rctomcat.
    Plugin Author Chad Butler

    (@cbutlerjr)

    Does it, as advised, encrypt and secure the data in any way or does it store it in plain text?

    WP-Members uses WP’s standard functions and db schemas for data collection and storage and therefore does not encrypt user data in the database (but then, neither does any other major membership or ecommerce plugin – at least not by default, and such a process is relatively pointless; but that’s a different discussion altogether).

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘GDPR’ is closed to new replies.