WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Trew Knowledge v2.1.2

GDPR

This plugin is meant to assist with the GDPR obligations of a Data processor and Controller.

GDPR

The facts

Rating
4.3★ from 58
Active installs
10k+
Price
Free
Last updated
21 Jul 2026
Added
Feb 2018
Requires WP
4.7
Tested up to
WP 7.0.4
Requires PHP
5.6
Downloads
374,685

Our analysis

AI-assisted

GDPR is a WordPress plugin designed to help website owners comply with the General Data Protection Regulation (GDPR). It provides tools for consent management, privacy policy management, and data subject rights, making it suitable for data controllers, processors, and data protection officers. The plugin includes features like privacy preference management for cookies, user data erasure requests, and data access rights for both administrators and users.

The plugin allows you to manage user consent for privacy policies and cookies, track changes to these policies, and notify users when updates occur. It also includes functionality for data export in XML or JSON formats, encrypted audit logs, and breach notification logs, making it a comprehensive solution for GDPR compliance.

Best for: This plugin is suitable for website owners who need to comply with GDPR regulations.

What it does well

  • Free to use from the WordPress.org directory
  • Offers extensive features for GDPR compliance
  • Includes consent management and privacy policy configurations
  • Supports user data rights, including access and erasure
  • Provides encrypted audit logs for compliance tracking

Where it falls short

  • Limited information on user experience or support
  • No specific details on performance or compatibility with other plugins

Verdict

GDPR provides a robust set of tools for managing compliance with data protection laws. It is a practical choice for those looking to ensure their site meets GDPR requirements.

From the developer

Trew Knowledge's own description of GDPR, lightly tidied.

This plugin is meant to assist a Controller, Data Processor, and Data Protection Officer (DPO) with efforts to meet the obligations and rights enacted under the GDPR.

Documentation

https://github.com/trewknowledge/GDPR/wiki

Collaboration

You can send your pull request at https://github.com/trewknowledge/gdpr

Shortcodes & helper functions

https://github.com/trewknowledge/GDPR/wiki/Functions-&-Shortcodes

Features

  • Consent management
  • Privacy Preference management for Cookies with front-end preference UI & banner notifications
  • Privacy Policy page configurations with version control and re-consent management
  • Rights to erasure & deletion of website data with a double opt-in confirmation email
  • Re-assignment of user data on erasure requests & pseudonymization of user website data
  • Data Processor settings and publishing of contact information
  • Right to access data by admin dashboard with email look up and export
  • Right to access data by Data Subject with front-end requests button & double opt-in confirmation email
  • Right to portability & export of data by Admin or Data Subject in XML or JSON formats
  • Encrypted audit logs for the lifetime of Data Subject compliance activity
  • Data Subject Secret Token for two-factor decryption and recovery of data
  • Data breach notification logs and batch email notifications to Data Subjects
  • Telemetry Tracker for visualizing plugins and website data

Settings

General

From the Settings options in the dashboard, you can select the Privacy Policy page for tracking and logging consent.

On login, the user must consent to the Privacy Policy outlined on the site. If the user does not consent, the user will not be registered or logged in.

If the site owner updates the Privacy Policy page content, the change will be logged and flagged to the admin that they must notify users on next login to seek re-consent. Additionally, the warning message can be dismissed in the event of a minor correction or mistake.

Additionally, under General Settings the Admin can set the outgoing email limitation which would set the batch notification email limit per hour in the event of a Breach Notification.

Cookie Preference Management

Read the full description on the official page →

Tagged as

Alternatives

Other plugins for privacy compliance.

CookieYes

Cookie banner, cookie consent and cookie notice plugin for GDPR and CCPA. Auto cookie blocking, Consent Mode v...

Free 1M+ installs 4.8★ (3,228)
Smash Balloon Social Photo Feed

Formerly "Instagram Feed". Display clean, customizable, and responsive Instagram feeds from multiple...

Free 1M+ installs 4.9★ (4,350)
Cookie Compliance for WordPress

Consent management platform for WordPress — GDPR, CCPA & ePrivacy cookie consent, autoblocking, consent re...

Free 900k+ installs 4.8★ (3,025)
Burst Statistics

Simple, lightweight WordPress analytics with privacy-friendly visitor tracking. Cookieless and GDPR-ready. Set...

Free 200k+ installs 4.9★ (183)
Complianz

Configure your own Terms and Conditions specific to your service or webshop.

Free 300k+ installs 4.9★ (184)