What is the best GDPR Plugin for wordpress ? There are so many GDPR plugins for wordpress and ecommerce we have decided to make an easy to follow Wordpress GDPR Plugins Review list so as to determine the best fit for your organisation.
GDPR is mandatory for all businesses dealing with citizens of the European Union. It is a framework of law the protects the personal information within organisations.
Caveat : No GDPR plugin makes an organisation 100% GDPR compliant. The plugins will cover some of the following functions of GDPR. There has been no communication with the makers of any of these products and there are no affiliate links. So there are no kickbacks or commissions flowing from this page.
- Subject Access Requests
- Right to be Forgotten
- Explicit Permission to Process Data
- Portability of information
- Newsletter Opt-ins and opt-outs
- Right to have personal information ammended
Below is a table ( sorry mobile viewers ) where we reviewed all the plugins. We thought we would share the work with you.
| GDPR Personal Reports | All in One GDPR | WP GDPR Compliance | WP GDPR | GDPR | GDPR Compliance | GDPR Tools | CookieBot | GDPR Banner | ||
| Author | Willows Consulting Ltd. | Ideaa | Van Ons | App Saloon | Trew Knowledge | Scribit | Vladimir Radnaev | Cybot A/S | Worcester Web Studio | |
| Platform | WooCommerce | Code Canyon | Wordpress | Wordpress | Wordpress | Wordpress | Wordpress | Wordpress | Wordpress | |
| Link | Buy Now | Buy Now | Download | Download | Download | Download | Download | Download | Download | |
| Price | $30 | $49-$500 | Free | Free | Free | Free | Free | Free | Free | |
| Paid Addons | No | no | no | yes | no | no | no | yes | No | |
| Subscription | no | Yes for unlimited license version | no | no | no | no | no | yes per doman per sub pages per month | no | |
| First Publish date | 15/03/2018 | 02/02/2018 | 04/11/2017 | 23/01/2018 | 16/02/2018 | 22/03/2108 | 02/02/2018 | 02/02/2018 | 16/01/2018 | |
| Demo Link | None | demo | None | None | None | None | None | None | None | |
| Fully GDPR Compliant | No | No | No | No | No | No | No | No | No | |
| Summary | Creates the SAR Automatically. Rigth to be forgotten and portable data automatically. | Creates Automatic SAR | Focused on Permissions links to supported addons. | Pushes Pro Version for all features. Not fully GDPR compliant | Lots of Promise but many reports that the installation does not work. | No Demo No functionality list | Basic Cookie and User Deletion Functions | Comprehensive cookie only handling. Priced on the number of Pages. Only Handles Cookies. Has links back to Authors Site | Basic Cookie Banner, not GDPR compliant | |
| Features | GDPR Clause | |||||||||
| Admin Settings | y | y | y | y | y | y | y | y | n | |
| Newsletter UnSubscribe Management | y | y | y | paid | n | n | y | n | n | |
| Listing 3rd Party Cookie Providers Manually | Recital 113 | n | y | n | paid | y | n | y | y | n |
| Automatic SAR | y | y | n | y | y | n | n | n | n | |
| Right to be Forgotten Automatic | y | n | n | paid | n | n | ||||
| Manual SAR | n | n | n | |||||||
| Right to be Forgotten Manual | n | y | n | paid | y | n | y | n | n | |
| Cookie Notice | Art. 4 | y | y | n | n | y | y | n | y | y |
| Cookie Management | Art. 4 | n | y | n | n | y | n | n | y | n |
| Opt-out on some cookies | Recital 32 | n | n | n | y | n | ||||
| Terms and Conditions Management | Recital 113 | y | y | n | n | y | n | n | n | n |
| Permission for all cookies | Recital 32 | y | y | n | n | y | n | y | y | y |
| Logged in Users | y | y | n | n | y | n | y | y | n | |
| Non Logged in Users | n | y | n | n | y | n | n | y | n | |
| Link to Opt Out restriction of processing | n | y | n | n | y | n | n | y | n | |
| Privacy Policy Edit | Recital 113 | y | y | n | n | y | n | n | n | n |
| Links with Gravity Forms | Art. 25 | n | n | y | paid | n | n | n | n | |
| Links with WooCommerce | Art. 25 | y | y | y | paid | n | n | n | n | |
| Links with Comments | Art. 25 | n | n | y | y | y | y | n | n | n |
| Pseudonomisation of Data After Forgotten Request | Recital 29 | y | n | n | n | y | n | n | n | n |
| Data Processor Settings | n | n | n | n | y | n | n | n | n | |
| Record Data Processors | n | n | n | n | n | n | n | n | ||
| Processor Agreements | n | n | n | n | n | n | n | n | ||
| Right to Access Data by Admin Dash board | n | n | n | n | y | n | n | n | n | |
| Right to Portability of Data | Art. 20 | y | n | n | n | y | n | n | n | n |
| Provide Portable Data Manually | Art. 20 | y | n | n | n | n | n | n | n | n |
| Provide Portable Data Automatically | Art. 20 | n | n | n | n | n | n | n | n | n |
| Audit Logs | y | n | n | n | y | n | n | n | n | |
| Audit Logs Encrypted | y | n | n | n | y | n | n | n | n | |
| Data Breach Notification to Batches of Users | Art 4 | n | n | n | n | y | n | n | n | n |
| Data Breach Notification to Registered Authority | Art 4 | n | n | n | n | n | n | n | n | n |
| Data Breach Audit Log | Art 4 | n | n | n | n | n | n | n | n | n |
| Data Breach Log Encryption | Art 4 | n | n | n | n | n | n | n | n | n |
| Data Breach Remedy | Art 4 | n | n | n | n | n | n | n | n | |
| Plugins Data Visualisation | n | n | n | n | y | n | n | n | n | |
| Wrapper Function | n | n | n | n | y | n | n | n | n | |
| Rectification of data | n | n | n | n | y | n | n | n | n | |
| Telemetry Tracker, tracks information being sent out from the server via plugins on the site. | n | n | n | n | y | n | n | n | n | |
| Staff Training Record | n | n | n | n | n | n | n | n | n | |
| Data Mapping | n | n | n | n | n | n | n | n | n | |
| Record Explicit Permission of T&C | Recital 32 | n | n | n | n | n | n | n | n | n |
| Record Explicit Permission of Privacy Policy | Recital 32 | n | n | n | n | n | n | n | n | n |
| Record Explicit Permission of Cookie Policy | Recital 32 | n | n | n | n | n | n | n | n | n |
| Database Encryption | Recital 29 | n | n | n | n | n | n | n | n | n |
About the Author:
Sean Owens is a Certified Data Protection Officer at Willows Consulting. He was certified in September 2017 with the Irish Computer Society after attending their 3 day course and sitting an independent exam with a pass level of 70% 2 months later. He is the designated DPO for Willows Consulting and his company ( ecomextras.com) have developed opensource GDPR addons for wordpress, woocommerce GDPR and opencart GDPR.