GDPR Compliance of WordPress blogs

  • Unknown's avatar

    Hi, I am sure I am not the only one wit hthis question. I have a private wordpress blog (free version), and I have a contact form where people can contact me, plus an option to subscribe to my blog by email. is this GDPR compliant, or how do I ensure that it is? My blog is not for commercial purposes.

    The blog I need help with is: (visible only to logged in users)

  • Unknown's avatar

    hi,

    Here are some useful links to learn more about GDPR:
    https://en.support.wordpress.com/automattic-gdpr/
    https://en.forums.wordpress.com/search/gdpr/

    Also keep an eye for further announcements at
    https://en.blog.wordpress.com

  • Unknown's avatar

    Yes, I am told there will be some update on this on 22 May. I am not so much interested in how WordPress protects my own privacy as in how I can comply with the EU regulations on my own (personal) blog, where I have subscribers by email, and social media links to my personal social media pages. I understand that these social media links, for example, collect information on people, and that this may not be in line with the EU regulations. I am concerned that I may be moving into illegality by having those lnks up there, but it would be a pity to have to take them down.

  • Unknown's avatar

    I read all the advice given so far.
    But when it comes to:

    If you want to write a Privacy Policy that discloses to your site’s visitors the information that’s collected when they follow or comment on your site, you can find a detailed description of what gets collected about them at https://jetpack.com/support/comments/#privacy

    it would be really useful to have a suggested privacy policy text that we can add to our blog pages. Because what is described here is quite complicated, and I do not know what of it I would have to include in such a note.

  • Hi there,

    it would be really useful to have a suggested privacy policy text

    I understand that that would be useful, but we cannot provide that, nor can we tell you exactly what to do to comply with the law, as we are not your attorneys.

    We are providing details on what information we collect about visitors to your site and how we use it, and we are working on providing you with the tools you’ll need to provide or delete that information on request, but if you need specific advice on or help with making your site compliant, you will need to consult a lawyer who specializes in this law.

  • Unknown's avatar

    Really? Surely the cost of doing this is prohibitive for most free WordPress users. I’m thinking that GDPR might undermine your business model, and it would be wise for you to provide a boilerplate statement for all users – it can’t be that hard, surely?

  • As kokkieh mentioned previously, we are not able to give legal advice.

  • Hi folks :)

    We can’t offer legal advice for your specific circumstances, but I will point out that our own privacy policy is Creative Commons Sharealike licensed:

    Privacy Policy

    Hope that helps!

  • Unknown's avatar

    As tomblissleeds says “Really? Surely the cost of doing this is prohibitive for most free WordPress users. I’m thinking that GDPR might undermine your business model, and it would be wise for you to provide a boilerplate statement for all users – it can’t be that hard, surely?”

    You are operating in Europe after all and have lots of European blog customers. For me this is a hobby and I sure am not willing to go to a lawyer just to ensure that my subscribers (who sign up by email via an automated WordPress theme) are somehow protected by the obscure GDPR. So, boilerplate privacy note please!

  • @karinsvad

    Please see @supernovia’s reply right above yours.

    I am closing this thread to further replies.

    For anyone else looking for general information on the GDPR, please refer to the sticky thread we posted here:

    https://en.forums.wordpress.com/topic/about-the-gdpr/

    If you have any further questions please create a new thread, but note once again that we cannot offer legal advice or guidance on whether or not individual sites are in compliance with the law, or how to make them so.

  • The topic ‘GDPR Compliance of WordPress blogs’ is closed to new replies.