This presentation was done during the WordPress Meetup in Arnhem, the Netherlands on April 20th. It contains information on how to prepare WordPress websites for the GDPR / AVG laws. (Dutch) Meer informatie op https://www.websitenazorg.nl/avg-technische-en-organisatorische-maatregelen/

2. Who am I?
• 36 years old
• 21 years of webdesign
• 10 years of WordPress bliss
• 01 year at WebsiteNazorg
• 02 years of GDPR puzzling

3. IMPORTANT - DISCLAIMER
• The data controller is responsible for correct implementation of the
GDPR. As so, I am not responsible for your organization or that of your
clients.
• I am the data controller for WebsiteNazorg
• I am the data processor for WebsiteNazorg clients

4. How to solve it?
“There’s a plugin for that!”
- Some random WordPress user
“There’s lots of money in that!”
- Some random WordPress plugin developer

5. Plugins: The Privacy Policy
• Can we solve this with generators?
• You need to write in your local language
• It’s just a page of text, genius ;-)
• Where to show it?
• In the footer of your website
• When consumers interact (i.e. forms)

6. Plugins: Managing User Rights
• Right of access
• Right to rectification
• Right to dataportability
• Right to be forgotten
• Most of this, you CAN do yourself!
• Some of this, you’d better do yourself!

7. Security: Technical and organizational measures
• WordPress is pretty secure by default
• Plugins and themes often aren’t (even paid ones)
• Manage updates well, keep a record!
• Update on a very, very, very regular basis!
• Don’t auto update, don’t!
• Apply security and don’t rely on ‘free’

8. Governance
• A single EU-wide law makes it possible for governments to invest in joint
investigation programs.
• Amongst these will be bots. They will be able to scrub websites to
identify possible problems.

9. What is Automattic up to?
• Automattic consists of
• Wordpress.com (user accounts)
• Jetpack (storing backups)
• WooCommerce
• Akismet (matches comments with their database)
• Vaultpress
• Polldaddy

10. What is Automattic up to?

11. What is Wordpress.org up to?

12. E-Privacydeclaration
• Functional cookies (no consent needed)
• Analytical cookies (consent needed)
• Tracking cookies (consent needed)
• Google Analytics? Check:
https://www.websitenazorg.nl/kb/google-analytics-instellen-voor-de-
avg/

13. Example
• First party cookies (mainly WordPress)
• Third party cookies (The rest)

14. Plugins: Controlling your cookies
• Just 1 doing it right…
• Or go full manual!

15. Questions?