Title: gdpr and plugins &#8211; mark compatible plugins?
Last modified: April 13, 2018

---

# gdpr and plugins – mark compatible plugins?

 *  Resolved [drcoopa](https://wordpress.org/support/users/drcoopa/)
 * (@drcoopa)
 * [8 years, 1 month ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/)
 * Hi [@all](https://wordpress.org/support/users/all/),
 * are there any plans to mark plugins or themes that are gdpr-compatible?
    Since
   this will affect all sites in EU I guess it would be a great help for the wordpress
   users here.
 * Maybe plugin developer who add a data-privacy description about how the plugin
   works and make sure that the plugin doesn’t send or stores data unless users 
   agree could be rewarded with some sort of “trust-seal” or something similar?
 * I am not sure if it was suggested already, but a search didn’t bring up anything.
   If this wasn’t the right place to post this or if its discussed anywhere else
   please point me to the right thread 🙂
 * Cheers

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/)
 * (@jdembowski)
 * Forum Moderator and Brute Squad
 * [8 years, 1 month ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/#post-10179171)
 * > are there any plans to mark plugins or themes that are gdpr-compatible?
 * I hope not!
 * _*Drinks coffee*_
 * GDPR compliance isn’t a matter of scanning code in an automated process. When
   an author uploads a plugin for the first time it gets reviewed before being accepted.
   But when updates to that plugin happens, that does not get reviewed by anyone.
 * A plugin can “claim” GDPR compliance but then get updated and collect user information
   without telling anyone.
 * That is why I hope that there will never be any effort to mark plugin in compliance
   with anything other than the WordPress plugin guidelines.
    -  This reply was modified 8 years, 1 month ago by [Jan Dembowski](https://wordpress.org/support/users/jdembowski/).
 *  Thread Starter [drcoopa](https://wordpress.org/support/users/drcoopa/)
 * (@drcoopa)
 * [8 years, 1 month ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/#post-10184917)
 * Hi Jan,
 * your line “drinks coffee* makes me wonder if you were interested in a discussion
   at all. But I marked this topic as unresolved and not a support question because
   I would like to hear more than just one opinion.
 * Maybe its not very clear what I meant, but don’t you think it would be something
   positiv if developer, who make this extra effort and let review the updates too(
   by whomever) would be rewareded?
 * And since the new laws are pretty strict it would force all users – even none-
   commercials and users with no programming-skills to review EVERY single update
   and garantuee to their users that everything is ok? Wouldn’t that be the death
   of a lot of free and hobby blogs and even small businesses?
 *  Moderator [Jan Dembowski](https://wordpress.org/support/users/jdembowski/)
 * (@jdembowski)
 * Forum Moderator and Brute Squad
 * [8 years, 1 month ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/#post-10185596)
 * > your line “drinks coffee* makes me wonder if you were interested in a discussion
   > at all.
 * I am interested in discussion. That was an attempt at humor. So was “I hope not!”
   with an exclamation point. I’m sorry that was lost on you.
 * > but don’t you think it would be something positiv if developer, who make this
   > extra effort and let review the updates too (by whomever) would be rewareded?
 * No, I don’t think it would be positive at all. I believe that lead to developers
   gaming that system to dupe users with a meaningless tag. By “gaming” I mean that
   some authors will add that just to get clicks without any knowledge of what that
   even means.
 * > And since the new laws are pretty strict it would force all users – even none-
   > commercials and users with no programming-skills to review EVERY single update
   > and garantuee to their users that everything is ok? Wouldn’t that be the death
   > of a lot of free and hobby blogs and even small businesses?
 * Not even a little death. I think you really need to review and understand those
   requirements. That’s part is not a topic for these forums and the EU has better
   places to look at that.
 * GDPR and DSGVO are serious topics and relying on free open source authors to 
   do your work for you is a poor decision. There are no service level guarantees
   or warranty of any kind for any software on this site.
 * If you download and use a plugin or theme that claims compliance and it is not,
   then the author is not the one to deal with the consequences. _You are responsible
   and held accountable._ It is your site after all.
 * No tag here will change that. Adding that as a WordPress.ORG feature will just
   help propagate a misunderstanding and put the burden of that compliance on the
   wrong people.
 * Give this topic a read.
 * [https://wordpress.org/support/topic/gdpr-and-the-forum-of-wordpress-org/](https://wordpress.org/support/topic/gdpr-and-the-forum-of-wordpress-org/)
 * There’s a lot of incorrect ideas about GDPR out there and what software developers
   need to do for that compliance.
 * Unfortunately, if any user has a concern about that then they should consult 
   people who can answer that question with authority and a guarantee. That does
   mean code review sometimes and that does mean paying someone or company for that
   service.
 *  [danieltj](https://wordpress.org/support/users/danieltj/)
 * (@danieltj)
 * [8 years, 1 month ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/#post-10197256)
 * As [@jdembowski](https://wordpress.org/support/users/jdembowski/) has said, plugins
   being GDPR compliant is not so much the issue, and more so the services you use
   and the website itself ensuring it’s GDPR compliant and knowing what is happening
   with user data.
 * In addition to this, most plugins don’t handle any user data anyway so some would
   not be marked as compliant (_as they’re not explicitly compliant_) because they
   don’t need to be as they don’t handle data. So it would be a tricky one to distinguish
   I think.
 *  Thread Starter [drcoopa](https://wordpress.org/support/users/drcoopa/)
 * (@drcoopa)
 * [8 years ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/#post-10239061)
 * Thanks for the replies so far. I guess I was the only one then, who thought of
   it as a benefit. 🙂

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘gdpr and plugins – mark compatible plugins?’ is closed to new replies.

 * In: [Requests and Feedback](https://wordpress.org/support/forum/requests-and-feedback/)
 * 5 replies
 * 3 participants
 * Last reply from: [drcoopa](https://wordpress.org/support/users/drcoopa/)
 * Last activity: [8 years ago](https://wordpress.org/support/topic/gdpr-and-plugins-mark-compatible-plugins/#post-10239061)
 * Status: resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics
