GDPR?

[Nicoletta]

As of May 25 2018 the new EU General Data Protection Regulation (GDPR) law will be activ. Is there any information around how GDPR compatible the Genesis Themes are?

More Information about the law can be found here: https://www.eugdpr.org/

One problem I can see so far is the Google Fonts, which are not GDPR compatible. Is there an easy way to get Genesis to save the fonts on my webserver instead?

[Victor Font]

I've been updating my client sites for GDPR for a few months already. GDPR applies to collecting personally identifiable information from EU residents and giving control of that data to the person that owns it. It's about obtaining consent before receiving their information. Neither Google fonts nor the Genesis Framework collect personally identifiable information.

Nevertheless, there are some performance gains to be had by using google fonts locally. https://victorfont.com/use-google-fonts-locally/

I suggest you take a look at this Facebook group: https://www.facebook.com/groups/GDPRforonlineentrepreneurs/

The group belongs to attorney Suzanne Dibble from the UK. She has a course on GDPR and a document package that you can license for use on your website.

I also have this article you can use to help guide your site prep: https://victorfont.com/preparing-your-wordpress-site-for-gdpr-compliance/

---

Regards,

Victor
https://victorfont.com/
Call us toll free: 844-VIC-FONT (842-3668)
Have you requested your free website audit yet?

[Nicoletta]

Thank you for this information! I will check out the article and the FB group.

I thought that Google Fonts uses the users IP-Adresse which is a personally identifiable information? Wouldn't that be against GDPR, if the user doesn't give his consent? At least that's what I read in multiple german GDPR articles.

[Victor Font]

Personally Identifiable Information means that you can tie the piece of data back to a specific user. If I show you the IP address 192.124.249.6, to whom does it belong? Tell me the name of the individual?

You can't. IP addresses by themselves are not PII.

---

Regards,

Victor
https://victorfont.com/
Call us toll free: 844-VIC-FONT (842-3668)
Have you requested your free website audit yet?

[Nicoletta]

That makes sense.In the german blogging community everyone is currently writing about how the IP adresse is a PII, but I just did some more digging and it seems indeed that even according to a European Union court rule the IP is currently only considered a PII in combination with other information that can be used to identify a person.

You just helped me a lot, thanks!

[CJWheels]

Hi Victor, how are you dealing with GDPR compliance for WordPress commenting? Is there a plug in that ads a checkbox to the input field or do you know if WordPress is coming out with an update. I'm also struggling with adding a checkbox to Genesis Enews Extended plug in. Hoping updates are coming to address this.

[Nicoletta]

I'm not a GDPR expert by any means, but as far as I understood it a checkbox is not necessary for WordPress comments. You only need to give the user information about which data you collect and how you use it with a link to your privacy notice. So I simply added a short information text before the "submit" button. I did this with code and the genesis hooks.

If you rather want a checkbox with a plugin, maybe this one can help you: https://www.wpgdprc.com/

But the WordPress "GDPR update" should be out this week, so I would wait till then.

Unfortunately I'm not using the Genesis Enews Extended plug in so I can't help you there.

[Author]

Posts