This plugin helps with upcoming General Data Protection Regulation (GDPR) by enabling pseudonimization of personal data and storing the newsletter sub …
Screenshots
Settings screen
Installation Instructions
- Upload the plugin files to the
/wp-content/plugins/ directory, or install the plugin through the WordPress plugins screen directly.
- Activate the plugin through the ‘Plugins’ screen in WordPress
- Use the Settings->GDPR screen to configure the plugin
- Modify permisions for /wp-content/newsletter_consents and /wp-content/enc_keys to be writtable by the web server user
Why store encryption key as file?
GDPR Article 17 requires that all data be removed, even from backups. If SQL file backups contain the key in database, private information is accessible by just restoring that data. When using encryption as key personal data in the SQL file backups are not readable without it. When removing the user or forgetting his data, removal of the key file makes the data in backups void (unable to be read as we dont have key anymore). Our recommendation is to configure backup system to exclude the keys in regular backups and just synchronize the keys with rsync on the backup server with option to match delete actions in keys folder. Also it improves security by requiring potential hacker to have access to both database and filesystem.
ChangeLog
1.0.4
- Added checks for required folders before enabling encryption
1.0.3
- Added check to generateKeys
1.0.2
- Fixed required PHP and WordPress version. Added image assets.
1.0.1
- Fixed install instructions
1.0
- Code reorganisation and better compatibility
0.9
