PDN152 Compliance

PDN152 Compliance helps website owners collect consents and prepare documents for compliance with Russian Federal Law No. 152-FZ “On Personal Data”.

Official website: fz-pdn.ru.

All built-in features in this WordPress.org plugin are fully available. There is no license key requirement and no locked functionality.

Main features:

• Cookie banner with cookie categories and stored user choices.
• Generate and publish documents on the site (personal data policy, cookie policy, consent text, mailing consent, public offer, and more).
• Consent log in the admin area (date, IP address, and source), with configurable retention.
• Integrations: WordPress registration, WooCommerce, Elementor, Contact Form 7, WPForms.
• Policy wizard, Roskomnadzor-oriented export helpers, and site readiness checks.
• Optional account deletion / personal-data destruction workflow (disabled until enabled in settings).

Important notes:

• The plugin does not send notifications to Roskomnadzor automatically. It helps you prepare data and texts.
• Optional external network checks (see External services) are off by default and run only when you enable them and manually run a compliance scan (or enable the optional weekly email report).

External services

This plugin may connect to third-party / external services for optional features. External network checks require an explicit opt-in in Settings → Privacy & external checks. No remote calls to these services are made until you enable the option and run a compliance scan (or enable the optional weekly email report).

ip-api.com (GeoIP)

Used only during a compliance scan (when opt-in is enabled) to estimate the country of the site host IP (resolved via DNS).

• Data sent: the site host IP address.
• When: only when external checks are enabled and a scan runs.
• Service: ip-api.com
• Terms of use: https://ip-api.com/docs/legal
• Privacy policy: https://ip-api.com/privacy

pd.rkn.gov.ru (Roskomnadzor personal-data operators portal)

Used only during a compliance scan (when opt-in is enabled) to look up the public operators registry. The plugin sends a registry search request to pd.rkn.gov.ru (including endpoints under /operators-registry/).

• Data sent: the operator INN from plugin settings (JSON body).
• When: only when external checks are enabled and a scan runs. The plugin never submits notifications to Roskomnadzor automatically.
• Service / portal: https://pd.rkn.gov.ru/
• Registry listing: https://pd.rkn.gov.ru/operators-registry/operators-list/
• Terms of use / legal basis (Federal Law No. 152-FZ “On Personal Data”): http://pravo.gov.ru/proxy/ips/?docbody=&nd=102108264
• Privacy policy (Roskomnadzor personal data processing regulation): https://rkn.gov.ru/chamber-of-commerce/polozhenie-ob-obrabotke-personalnykh-dannykh/
• Related information: https://rkn.gov.ru/activity/personal-data/

whois.com (manual link only)

The scan report may show a manual Whois URL for the site domain. The plugin does not send automatic requests to whois.com.

• Service: https://www.whois.com/
• Terms: https://shop.whois.com/support/legal.php
• Privacy: https://shop.whois.com/privacy/privacy

The optional weekly compliance email report is disabled by default. When you enable it, it emails a report to the address you configure; if external checks are also enabled, that report generation may contact ip-api.com and/or pd.rkn.gov.ru as described above.