The General Data Protection Regulation (GDPR) is fully enforceable in the European Union involving even countries outside the European Union that handle personal data of EU citizens. After the deadline of May 25, 2018 all organisations are expected to be compliant with EU GDPR and 2022 is the year of GDPR enforcement.
Moreover the Joomla! GDPR component is compliant even with the Google Consent Mode CMP v2, Microsoft UET Consent Mode and Microsoft Clarity, German EUGH Cookie Law, European ECJ, CCPA (California Consumer Privacy Act) as of January 1, 2020, Italian new Cookie Law as of January 9, 2022 and with Federal Law of the Russian Federation of July 27, 2006 No. 152-FZ and of Ukraine "On Personal Data".

This means that there are a new set of rules to consider when dealing with personal data of users. The GDPR component aims to extend the Joomla! core with a set of extra features, currently missing, in order to have Joomla! compliant with the EU GDPR law.

Main features of GDPR are:
•GDPR Cookie consent: the standard cookie banner is no longer enough for EU GDPR, now you need a more effective solution to really block local cookies, third-party cookies, tracking Javascript storages and resources before the consent is given also supporting the opt-out of single categories and cookies, revocable consent and modal block of the website

•Cookie classification: it's possible to build a full classification of cookies, the component supports up to 4 categories that are customizable based on cookies/domains used on your website and that can contain user-defined services

•Audit and Auto Configuration™: this powerful tool performs an audit of your website to scan for cookies and domains used and to automatically classify them in the right category

•Generate the cookie and privacy policy via ChatGPT™: it's possible to automatically generate the cookie and privacy policy for your website via ChatGPT. Thanks to the power of AI the GDPR communicate with the ChatGPT API with special and specific criteria suitable to generate an adequate basis for the policy published on your site. (Requires ChatGPT account)

•Integration with Google Consent Mode CMP v2: it's possible to integrate with Google Consent Mode CMP for Google AdSense and Google Analytics consents, that can be granted or denied, and transferred to the Google Consent Mode platform also activating the Google CMP theme for a seamless integration with the Google Consent Mode v2

•Opt-out and define single cookies: the advanced cookies management of the GDPR component allows to opt-out single cookies or domains and to display a description about the usage and purpose of each of them

•Unlock resources without page reload: the advanced blocking mode of the GDPR component allows to unlock blocked resources such as iframes or scripts on the fly and without a full page reload, also showing a placeholder for visitors

•Different strictness levels: it's possible to switch between different levels of strictness when dealing with cookies, even supporting geolocation to exclude visitors from countries that don't apply the EU GDPR law

•Logs of user changes: whenever a change in a user profile occurs, for example if a user changes his personal data, all changes must be tracked and logged. GDPR supports even Joomla! custom fields and the core User Profile plugin. The logs report can be exported in CSV and Excel formats

•Logs of consents and account consent registry: the logs of user consents is a global system that allows to keep track of all consents given by users, either logged in or logged out, to every form in which you integrate the privacy policy checkbox. The logs report can be exported in CSV and Excel formats

•Logs of cookie consents: the component is able to track even consents given for the cookie usage both by visitors and registered users of your website

•Profile deletion: every user must be able to delete his own profile at any moment based on the 'Right to be forgotten' regulation. Moreover GDPR doesn't simply delete the user profile, but it can optionally delete all user generated contents, such as articles, contacts, blogs, etc

•Profile export: every user must be able to export his own profile in a machine readable format, GDPR supports CSV and Excel

•Fully automatic deletion and export: by default the deletion and export of a user profile is fully managed by the component and self-made by the user so you don't have to worry about manual operations. Optionally you can choose to manage deletion and export manually and receive a request by users

•Privacy policy checkbox: every form on your website dealing with personal data must include a mandatory privacy policy checkbox to consent personal data handling. GDPR can integrate with all of them to show the privacy policy checkbox

•Consent registry: you can generate and export the registry including consent details given by users that is essential if requested by the Data Protection Commissioner

•Record of processing activities: the component is able to manage the record of processing activities and its generation in both Excel and OpenOffice format to be compliant with the EU GDPR

•Dynamic checkbox: this feature works as a privacy construction kit in that you can create multiple and custom privacy policies associated to an individual checkbox and place it wherever you need

•Data breach notifications: in the case that a data breach occurs, you can mark violated profiles and quickly notify users sending them an informative email

•Privacy policy: you can include popup contents or link to your privacy policy

•Cookie policy link: you can include popup contents or link to your cookie policy

•Multilanguage support: contents can be translated into different languages using the standard Joomla! multilanguage strings

•Advanced integration system: GDPR ships with preconfigured integrations with common extensions such as JomSocial, EasySocial, Virtuemart, etc moreover it can be configured to integrate with all extensions that generates standard forms(non-ajax)

•Revocable consent: you can allow users to revoke their consent to the privacy policy and be notified whenever this happens to take the correct action

•Retroactivity: you can force already registered users to explicitly accept the privacy policy on the first login

•Bulk cookie consent: the GDPR component supports the bulk cookie consent across multiple domains you own to request the coookie consent only once for all domains

•Log IP address: it's possible to track even the IP address of each user to uniquely identify users even if simple visitors. The IP address will be included in the logs of user changes, in the consents registry and in the cookie log

•Exclusions system: you can choose to exclude certain user groups or certain components from the GDPR requirements

•Integration with JRealtime Analytics: GDPR can be integrated with the component JRealtime Analytics by JExtensions Store in order to provide a fully GDPR-compliant solution for stats tracking to replace Google Analytics

•Accessibility WCAG 2.2 AAA: GDPR fully adheres to the latest Web Content Accessibility Guidelines (WCAG) 2.2 at the highest AAA level, ensuring that all consent interfaces are accessible to users with disabilities

Product features:

-GDPR Cookie consent: actually block local, third-party cookies and the user session before the consent is given, even allowing revocable consent and cookie classification

-Delete/Export profile: allow users to delete or export in a machine readable format their profile at any time

-Cookie and Privacy policy: automatically generate the cookie and privacy policy for your website via ChatGPT

-Data breach management: if a data breach occurs you can manage and notify violated users quickly within 72 hours

-Highly customizable: customize the theme, colors, contents and the integration with third party extensions

-Multilanguage: you can translate contents for the cookie toolbar, form controls and email using the Joomla! multilanguage

-Log user changes: log every change in a user profile, track old and new values and generate a CSV/Excel report

-Log users and consents: log every change in a user profile to track old and new values, log given consents to your forms and generate a CSV/Excel report

•Audit and Auto Configuration™: integrated Audit feature to automatically find and classify cookies and domains used

-Logs of cookie consents: the Joomla! GDPR component is able to track even consents given for the cookie usage both by visitors and registered users of your website

-Privacy policy: include the privacy policy checkbox in every form dealing with personal data

-Record of activities: the component is able to manage the record of processing activities and its generation in both Excel and OpenOffice format

-Dynamic checkbox: create custom consents for multiple services offered on your website

-Notifications: get notified when a user deletes his profile, notify users quickly if a problem occurs

-Permissions: take advantage of an advanced management of permissions and exclusions by user group

-Integrations: GDPR is able to integrate with every extension that generates a form thanks to advanced settings

Available for ALL JOOMLA VERSIONS starting from 2.5.