WP Consent Receipt

A Consent Receipt plugin for WordPress.

Author:	Oliver Maerz (profile at wordpress.org)
WordPress version required:	3.0.1
WordPress version tested:	5.2.2
Plugin version:	0.28
Added to WordPress repository:	21-06-2016
Last updated:	16-07-2019 Warning! This plugin has not been updated in over 2 years. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.
Rating, %:	0
Rated by:	0
Plugin URI:	https://olivermaerz.github.io/wp-consent-rece...
Total downloads:	716
Click to start download

A Consent Receipt plugin for WordPress. The WP Consent Receipt plugin can be called from themes and other plugins via the wp_consent_receipt_button filter hook:

if (has_filter('wp_consent_receipt_button')) {
    $html = apply_filters('wp_consent_receipt_button', $html, $consentReceiptData);
}

This implementation of the Consent Receipt is based on the specifcation of the Kantara Initiative – Consent & Information Sharing Work Group. For more information about the Consent Receipt and for the latest specification see: http://kantarainitiative.org/confluence/display/infosharing/Consent+Receipt+Specification

Arbitrary section

The WP Consent Receipt plugin can be called from themes and other plugins via the wp_consent_receipt_button filter hook:

if (has_filter('wp_consent_receipt_button')) {
    $html = apply_filters('wp_consent_receipt_button', $html, $consentReceiptData);
}

Example data for the $consentReceiptData associative array:

$consentReceiptData = array(

    // 0: Version
    'version' => '0.8',

    // 1: This is the legal jurisdiction under which the processing of personal data occurs (MUST)
    'jurisdiction' => 'US', 

    // 2: Timestamp of when the consent was issued (MUST)
    'iat' => time(), 

    // 3: Is used to describe how the consent was collected i.e. webform opt in, or implicit, verbal (MUST)
    'moc' => 'web form', 

    // 4: Unique identifier for this consent receipt (MUST)
    'jti' => '', // will be filled in by plugin 

    // 5: public key url
    'publicKey' => get_site_url() . '/?cr_public_key=true',

    // 6: The identity and company of the data controller and any party nominated to be data controller on behalf of org (MUST)
    'dataController' => array(
        'onBehalf' => false,
        'contact' => 'John Doe',
        'company' => 'Kantara Initiative, Inc.',
        'address' => '401 Edgewater Place, Suite 600, Wakefield, MA, 01880 USA',
        'email' => 'privacy-controller@kantarainitiative.org',
        'phone' => '+1 123-456-7890',
    ),

    // 13: the internet and immediately accessible privacy policy of the service referred to by the receipt (MUST)
    'policyUri' => $group->policy_url, 

    // 14: Name of the service that requires personal information.
    'services' => array(
        array(
            'serviceName' => 'Kantara Initiative ' . $group->group_name,
            'purposes' => array(
                array(  
                    'purpose' => 'Authority to sign Participation Agreement',
                    'consentType'  => 'Explicit',
                    'purposeCategory' => array(
                        'Affiliation',
                    ),
                    'piiCategory' => array(
                        'Membership',
                    ),
                    'nonCorePurpose' => false,
                    'purposeTermination' => $group->policy_url,
                    'thirdPartyDisclosure' => false,
                ),
                array(
                    'purpose' => 'Voting Status',
                    'consentType'  => 'Explicit',
                    'purposeCategory' => array(
                        'Core Function', 
                    ),
                    'piiCategory' => array(
                        'Membership',
                    ),
                    'nonCorePurpose' => true,
                    'purposeTermination' => '(when no activity)',
                    'thirdPartyDisclosure' => false,
                ),
                array(
                    'purpose' => 'Agree to IPR Policy',
                    'consentType'  => 'Explicit',
                    'purposeCategory' => array(
                        'Core Function', 
                    ),
                    'piiCategory' => array(
                        'Membership',
                    ),
                    'nonCorePurpose' => false,
                    'purposeTermination' => 'staff@kantarainitiative.org',
                    'thirdPartyDisclosure' => false,
                ),
                array(
                    'purpose' => 'Web statistics',
                    'consentType'  => 'Explicit',
                    'purposeCategory' => array(
                        'Improve Performance', 
                    ),
                    'piiCategory' => array(
                        'Network/Service',
                    ),
                    'nonCorePurpose' => false,
                    'purposeTermination' => 'staff@kantarainitiative.org',
                    'thirdPartyDisclosure' => true,
                    '3rdPartyName' => 'Google',
                ),
            ),
        ),
    ),

    // 21: Subject provided identifier, email address - or Claim, defined/namespaced    (MUST)
    'sub' => 'jane.doe@gmail.xyz', 

    // 23: Sensitive Data Y/N (MUST)
    'sensitive' => false,

    // 24: Category for Sensitive Information collection (MUST)
    'spiCat' => array(
        //emtpy
    ),


); // End consentReceiptData array

if (has_filter('wp_consent_receipt_button')) {
    $html = apply_filters('wp_consent_receipt_button', $html, $consentReceiptData);
}