FAIR

Federated and Independent Repositories

GDPR Data Request Form

Plugin Banner

GDPR Data Request Form

by Jb Audras

Download
Description

This plugin uses WordPress Core tools for GDPR Compliance.

Since release 4.9.6, WordPress admin has some tools to handle Privacy User Requests. Administrators are able to create Data Request for every users in order to send or erase users data. This plugin allow website administrators to display Data Request Forms in front-end, for example in your Privacy Policy Page.

Easily integrate a Personal Data Request Form for your visitors/users in front-end, with some options:
– Personal Data Export
– Personal Data Erasure
– Both of them

It’s easy to integrate:

  • Widget
    The widget allows to integrate Data Request Form in your theme widget areas. It comes with three options: Form Title, Form Description Paragraph and Form Type.

  • Gutenberg Block (since 1.4!)
    The Gutenberg Block makes it even easier to integrate front-end forms in your website. The block allows you to choose the type of form you need.

  • Shortcode
    [gpdr-data-request] shortcode allows to integrate Data Request Form where you need. This shortcode has no parameter.

  • PHP Function
    echo gdrf_data_request_form( $args ) function allows to integrate Data Request Form where you need. This function has some parameters and filters (see FAQ section below). Don’t forget to echo the function.

GDPR Data Request Form is using AJAX to provide clean and user-friendly forms in front-end. You can integrate them in any page of your website (like your Privacy Policy Page) or in your sidebar/footer.

The email address of the Data Protection Officer (DPO) can be changed in the Privacy Settings screen (Settings > Privacy).

Data Request Workflow:

  • The user/visitor use your Personal Data Request Form to ask for Personal Data Export or Erasure.
  • A request is created in WordPress Tools > Export/Erase personal data.
  • An email is sent to the user/visitor to confirm this request.
  • The user request is set to Confirmed in Tools > Export/Erase personal data.
  • An email is sent to the website administrator to validate the request.
  • The personal data are sent by email to the user/visitor (as a 3-day available download link), or erased, depending on the user request type.
  1. Upload this plugin folder to the /wp-content/plugins/ directory
  2. Activate the plugin through “Plugins” WordPress menu: That’s all, there is no settings!
  3. To display Data Request Form, use our shortcode [gpdr-data-request] in your posts/pages or use our Widget GDPR Data Request Form available on “Widgets” Screen.
  1. Front-end form feature.

    Front-end form feature.

  2. Front-end form request succeed.

    Front-end form request succeed.

  3. Specific Gutenberg Block available.

    Specific Gutenberg Block available.

  4. Gutenberg Block rendering in the editor.

    Gutenberg Block rendering in the editor.

  5. Widget parameters.

    Widget parameters.

  6. Confirmation email sent to the user/visitor.

    Confirmation email sent to the user/visitor.

  7. Data requests screen updated in WordPress Admin.

    Data requests screen updated in WordPress Admin.

  8. The user/visitor confirmed this Data Request.

    The user/visitor confirmed this Data Request.

  9. Website owner can email user/visitor personal data.

    Website owner can email user/visitor personal data.

  10. The user/visitor received an email with a download link.

    The user/visitor received an email with a download link.

  11. Personal Data Export as received by the user/visitor.

    Personal Data Export as received by the user/visitor.

Prerequisites

You need WordPress 4.9.6 at least to use this plugin.

Data Request Workflow

  • The user/visitor use your Personal Data Request Form to ask for Personal Data Export or Erasure.
  • A request is created in WordPress Tools > Export/Erase personal data.
  • An email is sent to the user to confirm this request.
  • The user request is set to Confirmed in WordPress Tools > Export/Erase personal data.
  • An email is sent to the website administrator to validate the request.
  • The personal data are sent by email to the user/visitor (as a 3-day available download link), or erased, depending on the user request type.

How to display Data Request Forms using the shortcode?

Use our shortcode [gdpr-data-request] in your posts or pages.

How to display Data Request Forms using the PHP function?

Use our function: echo gdrf_data_request_form() in your theme/child theme.
This function has some parameters:

‘form_id’ (type String): ID of the

<

form> HTML element. Default: gdrf-form.
‘label_select_request’ (type String): label of the Request Type selector.
‘label_select_export’ (type String): label of the export option radio button.
‘label_select_remove’ (type String): label of the remove option radio button.
‘label_input_email’ (type String): label of the “email” required field.
‘label_input_captcha’ (type String): label of the “captcha” required field.
‘value_submit’ (type String): text of the submit form button.
‘request_type’ (type String): either you want to display the Export Personal Data Form, the Remove Personal Data Form, or to let the users choose their request by themselves.

See the documentation for further examples/use case: GitHub Repository

How to display Data Request Forms using widgets?

Use our widget GDPR Data Request Form available on Widgets Screen.

How to display Data Request Forms using Gutenberg Block?

Use our Privacy Request Block Block available on any page/post using Gutenberg Block Editor.

Can I use custom CSS styles for my GDPR Data Request Forms?

Sure! This plugin only have CSS Styles for error/success messages. It will use your theme default CSS styles. Every HTML element of the form uses specific CSS classes so your can customize it as you need. There is no default CSS styles except for error/success messages.

How can I manage Users Personal Data Request in WordPress Admin?

Please read this Make/Core post announcing 4.9.6 GDPR features (English).
If you speak French, you can also read the post I wrote on Whodunit Agency’s Blog: WordPress 4.9.6 et la conformité RGPD (French)

My language is not supported or partially, what can I do?

This plugin is handled by the WordPress polyglot’s community.
The plugin author is not responsible for translations or mistakes in other languages than English (and also French since this is my native language).
You can contribute to translate GDPR Data Request Form in your native language here (and fix any mistakes/typos by yourself as well).

How can I contribute to this plugin?

This plugin is being developed on Github.
Any comment, issue or pull request are more than welcome 🙂
You can also open a support ticket to ask for enhancements/bugfixes.

Lovely contributors: @audrasjb (plugin author), @juliobox, @wolly, @presskopp, @abdullahramzan, @xkon.

Essential!

By momo-fr on September 1, 2022

I use it on all my GDPR pages so that visitors can query the database and have their respective data removed, if they wish, without me having to do anything. Brilliant and essential!

Essential.

By Loïc Antignac (Webaxones) on August 3, 2021

An essential extension for those who want to comply with the GDPR. Not having this functionality in the Core is nonsense.

GDPR Data Request Form By audrasjb

By guzmanldn on July 9, 2020

Very good

best plugin i love option

By jawas on May 12, 2020

Very good plugin hoping that it always stays up to date because very very useful function thank you

I really love this plugin

By Wolly aka Paolo Valenti (wolly) on September 4, 2019

I use on some sites, and I think it's really a fantastic plugin. Thanx

Good Job

By Frank Noack on February 13, 2019

Good job and very useful

This is the ONE!

By welswebmaster on February 12, 2019

This is the one GDPR plugin that works especially well with Gravity Forms by respecting the Personal Data privacy field selector. Thank you, thank you!

Excellente extension, très fonctionnelle, juste un défaut

By ppotier on June 4, 2018

Bravo, je viens de l'installer et de la tester, le système est très simple, la communication par email fonctionne parfaitement et on récupère vraiment tout ce qui concerne les contributions forum du site pour l'utilisateur. Un seul bémol je trouve, voir si corrigeable, pour l'instant je ne mettrai pas en ligne à cause de ce petit défaut mais majeur à mon avis. quand on demande l'envoi des informations, on reçoit bien un mail : Dans ce mail, le lien qui est indiqué affiche clairement le chemin d'accès vers l'ADMINISTRATION, hors celle-ci est cachée ou renommée afin de ne pas faciliter la tache aux pirates and co. Il faudrait que le chemin n'utilise PAS le lien admin
Une demande a été faite afin d’effectuer les actions suivantes sur votre compte : Exporter les données Pour confirmer cela, veuillez cliquer sur le lien suivant : http://mon_site_web/mon_chemin_changé_admin?action=confirmaction&request_id=34022&confirm_key=qsYE1jxPorLPzl6CHdO0 Si vous ne souhaitez pas effectuer cette action, vous pouvez ignorer et supprimer cet e-mail en tout sécurité.
Merci à Jean-Baptiste pour son travail.

A lifesaver!

By Anonymous User 15418796 (anonymized_15418796) on August 3, 2021

I can't believe this plugin doesn't have more downloads. This is wonderful! It's simple, easy and worked right out of the box. It does exactly what it says it will do, seamlessly and without headache. I'm really looking forward to the next update. I hope to be able to edit the messages (grammar is incorrect in a submit confirmation and I need to edit one spelling to reflect the U.S. spelling instead of the EU spelling) One small but really important request: Please, please get rid of "Howdy" as the email greeting! Our customers should not be greeted so informally. I could not find any way to edit the confirmation and email messages.

A must have for GDPR (RGDP)

By Gregoire Noyelle (aglekis) on May 30, 2018

Very good tool to help us with GDPR. Thanks

1.7

  • Security: Fixes a security issue discovered by Ngô Thiên An and responsively escalated by the Patchstack team. Thanks!
  • CSS: Adds the wp-element-button class to the form button to allow it to be automatically styled bye WordPress global styles. Props @maxpertici from Whodunit team.
  • Typo correction in the readme. Props Marc Lacroix from the French WP Slack team.

1.6

  • Enable the DPO email settings feature.

1.5.2

  • WP 5.9 compatibility.

1.5.1

  • Fix a potential PHP error in the DPO email address override.

1.5

  • New feature: the Data Protection Officer (DPO) email address can now be changed in the privacy settings screen.

1.4.2

  • Various WordPress coding standards enhancements. Props @leprincenoir for the patch: https://github.com/audrasjb/gdpr-data-request-form/pull/25

1.4.1

  • Fix: Simplify form data serialization when submitting form with AJAX. Props @gonzomir for the patch: https://github.com/audrasjb/gdpr-data-request-form/pull/24

1.4

  • New feature: introduce the Privacy Data Request Gutenberg Block.
  • New feature: introduce privacy_data_request_form_defaults Filter to hook the default form parameters.
  • Enhancement: new option on the Widget. Now you can choose the type of form you want to display.
  • Coding standards improvements.

1.3

  • Introduce gdrf_data_request_form() function.
  • General code refactoring to prepare potential Core inclusion of the plugin.
  • Introduce [gdpr-data-request] shortcode. Obviously, the old shortcake is still supported for backward compatibility.

1.2

  • Replaces fixed captcha with a randomized one for better security.
  • Adds function_exists to check if WP 4.9.6 is used before displaying the form.
  • Fix some i18n strings
    Thanks @juliobox, @presskopp and @abdullahramzan for feedbacks, fixes and implementations.

1.1

  • Enqueue styles and scripts only when necessary (thanks @juliobox and @jmlapam for the feedback and few fixes)
  • Removes CSS default color to radio button label (thanks @wolly for the feedback)

1.0.1

  • Small fix on widget part (thanks @juliobox for his feedback)

1.0

  • First version of this plugin: includes shortcode and widget to handle GDPR Personal Data Requests Form in front-end.
Back to top