13

I want to know is magento compatible for GDPR compliance because from May 25, 2018 GDPR Act is applied in all EU countries.

What should we need to do to run our magento e-commerce site under this rule.

Improve this question
2
  • Good question. Only came to know about this now.
    – Shyam Krishna Sreekumar
    Commented Jan 31, 2018 at 12:01
  • as far as i checked, it wont be. We might need to make it compliant.
    – Shyam Krishna Sreekumar
    Commented Jan 31, 2018 at 12:02

4 Answers 4

Reset to default
7

The simple answer is NO, Magento is not yet GDPR compliance, but you need to bear in mind GDPR is not just implementing technical elements on your website or Magento store. It is a disciple which is around making sure the personal data (for example email address, phone number, name, addresss, medical info etc.) which is stored in your datacentre in any format or the personal data that you are sharing with third parties is secure.

Here is the list of things you need to consider to answer -:

  • What information is being collected?

  • Who is collecting it?

  • How is it collected?

  • Why is it being collected?

  • How will it be used?

  • Who will it be shared with?

  • What will be the effect of this on the individuals concerned?

  • Is the intended use likely to cause individuals to object or complain?

Here is the list of things which could help you achieving GDPR compliance on your Magento store -:

  • Move all your trackings to Google Tag Manager
  • Adds cookie consent toolbar either on the header and footer of your website
  • Ability to remove personal data by individuals
  • Ability to Opt-out from subscription by individuals
  • Ability to export personal data
  • Anonymize personal data, especially the data which is not being used for transactional purposes for example data sitting in quote table
  • Update privacy policy
  • Security scan

Please have a look at the following page which can help around GDPR compliance on Magento store -:

https://www.scommerce-mage.com/magento-gdpr-compliance.html

Improve this answer
5
  • 2
    Thanks for sharing the information, do we have any third party extensions available to achieve this?
    – user2804
    Commented Apr 23, 2018 at 15:17
  • 1
    the above link will give you all the information needed but you can install the following extension for Magento 1 scommerce-mage.com/magento1-gdpr-compliance.html which covers right to be forgotten, right to be informed and right of access.
    – stevensagaar
    Commented Apr 23, 2018 at 15:21
  • 1
    @sv3n - I have covered remove/anonymisation in point 3 and 6 above. In regards to "minimize collection of data" that could vary business to business for example some business do need phone number to call before they deliver goods. As far as they can justify why are they collecting personal data then it should be ok.
    – stevensagaar
    Commented May 9, 2018 at 14:47
  • 1
    @joshua-flood - Once your order has been delivered, then you don't need this data which means you can anonymise it. As a business you should have a data retention policy in place which could be between 6 months to 10 years which means after that period all personal data will be either deleted or anoymised. This will hugely reduce the impact in case the data gets stolen. Hope this helps.
    – stevensagaar
    Commented Jul 1, 2018 at 14:25
  • 1
    @user2804 - here is the link to M2 extension as well scommerce-mage.com/…
    – stevensagaar
    Commented Aug 13, 2018 at 13:32
4

General Data Protection Regulation (GDPR) is all about making customer data secure. After searching on google I have found some useful links and module as below:

https://github.com/AdfabConnect/magento2gdpr (Module provides GPDR compliance inside Magento2)

https://www.aitoc.com/blog/gdpr-compliance-magento-security-tips/

https://community.magento.com/t5/Off-Topic/GDPR-Compliance-for-those-with-EU-customers/td-p/66781

Hope this help!!

Improve this answer
0
1

Today I also searching for the GDPR extension and found that extensions are available on Magento marketplace.

M1: https://marketplace.magento.com/zero1-zero1-gdpr.html

M2: https://marketplace.magento.com/zero1-gdpr.html

Improve this answer
0

GDPR introduces some significant changes in the data protection laws to help tighten security of citizens’ information online. The regulation consequently gives a strong impact on how companies collect and process personal data. If you just need the basic features to follow the GDPR you can download it for free here: https://github.com/mageplaza/magento-2-gdpr. If you need more than that(Manage billing documents, Cookie restriction...) look Pro version at this: https://www.mageplaza.com/magento-2-gdpr-extension/

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.