Privacy and GDPR settings in Wordpress - Step-by-Step Execution

Concept Flow - Privacy and GDPR settings

User visits site

↓

Cookie consent banner shown

↓

User accepts or rejects cookies

↓

Settings saved in browser

↓

Site respects user choices

↓

User requests data or deletion

↓

Site processes GDPR requests

This flow shows how WordPress handles user privacy by showing cookie consent, saving choices, and processing GDPR data requests.

Execution Sample

Wordpress

<?php
// Enable privacy features
add_action('init', function() {
  add_theme_support('privacy-policy');
});

This code enables WordPress privacy features to support GDPR compliance.

Execution Table

Step	Action	Result	User Impact
1	User visits site	Site loads with cookie banner	User sees cookie consent banner
2	User clicks 'Accept'	Consent saved in cookie	Site can use cookies
3	User clicks 'Reject'	Consent saved in cookie	Site disables non-essential cookies
4	User requests data export	Site generates data file	User receives personal data
5	User requests data deletion	Site deletes user data	User data removed from site
6	User revisits site	Banner not shown again if consent saved	User experience respects choice

💡 Process ends when user consent is saved and GDPR requests are handled

Variable Tracker

Variable	Start	After Step 2	After Step 3	After Step 4	After Step 5	Final
cookie_consent	null	"accepted"	"rejected"	"rejected"	"rejected"	"rejected" or "accepted"
user_data_request	null	null	null	"export_requested"	"deletion_requested"	null

Key Moments - 3 Insights

Why does the cookie banner sometimes not show after the first visit?

Because the user's consent choice is saved in a cookie (see execution_table step 6), so the site remembers and does not show the banner again.

What happens if a user rejects cookies?

The site saves the rejection in a cookie and disables non-essential cookies (execution_table step 3), respecting user privacy.

How does WordPress handle user data requests?

When a user requests data export or deletion (steps 4 and 5), WordPress processes these requests and updates user data accordingly.

Visual Quiz - 3 Questions

Look at the execution_table, what is the user impact at step 3?

A Site can use cookies freely

B Site disables non-essential cookies

C User data is deleted

D Cookie banner is shown again

💡 Hint

Check the 'User Impact' column at step 3 in the execution_table

At which step does the site generate a data file for the user?

A Step 2

B Step 3

C Step 4

D Step 5

💡 Hint

Look at the 'Action' and 'Result' columns in the execution_table for data export

If the user never clicks accept or reject, what happens to the cookie_consent variable?

A "accepted"

B "rejected"

C null

D undefined

💡 Hint

Check variable_tracker for cookie_consent before any user action

Concept Snapshot

WordPress Privacy & GDPR Settings:
- Show cookie consent banner on site load
- Save user choice in cookie
- Respect user choice by enabling/disabling cookies
- Handle user data export and deletion requests
- Use add_theme_support('privacy-policy') to enable features
- Consent remembered to avoid repeated banners

Full Transcript

This visual trace shows how WordPress manages privacy and GDPR settings. When a user visits the site, a cookie consent banner appears. The user can accept or reject cookies, and their choice is saved in a cookie. The site then respects this choice by enabling or disabling cookies accordingly. Users can also request their personal data or ask for deletion, which WordPress processes. The cookie consent variable changes from null to accepted or rejected based on user action. The cookie banner does not show again if consent is saved. This flow ensures the site complies with GDPR rules and respects user privacy.

Practice

1. What is the main purpose of the Privacy and GDPR settings in WordPress?

easy

A. To speed up website loading times

B. To protect user data and ensure legal compliance

C. To improve SEO rankings automatically

D. To change the website's theme colors

Solution

1. Step 1: Understand GDPR and Privacy settings

   These settings help protect user personal data and comply with laws like GDPR.

2. Step 2: Identify the main goal

   The goal is to keep user data safe and make the site legal, not to affect speed or design.

3. Final Answer:

   To protect user data and ensure legal compliance -> Option B

4. Quick Check:

   Privacy and GDPR = Protect data [OK]

Hint: Privacy settings = user data protection and legal rules [OK]

Common Mistakes:

• Confusing privacy with site speed
• Thinking GDPR changes design
• Assuming it improves SEO automatically

2. Which WordPress menu path leads you to the Privacy settings page?

easy

A. Plugins > Privacy

B. Appearance > Privacy

C. Settings > Privacy

D. Tools > Privacy

Solution

1. Step 1: Recall WordPress menu structure

   Privacy settings are found under the main Settings menu, not Appearance, Tools, or Plugins.

2. Step 2: Confirm correct menu path

   Settings > Privacy is the correct path to access privacy options.

3. Final Answer:

   Settings > Privacy -> Option C

4. Quick Check:

   Privacy under Settings = True [OK]

Hint: Privacy is always under Settings in WordPress [OK]

Common Mistakes:

• Looking under Appearance or Plugins
• Confusing Tools with Settings
• Assuming Privacy is a separate top-level menu

3. What happens when you select a Privacy Policy page in WordPress settings?

medium

A. The Privacy Policy page is hidden from search engines

B. The selected page content is deleted

C. Users cannot access the Privacy Policy page

D. WordPress automatically adds a link to the Privacy Policy in the footer

Solution

1. Step 1: Understand Privacy Policy page role

   Selecting a page tells WordPress which page shows your privacy info.

2. Step 2: Identify WordPress behavior

   WordPress adds a link to this page in the footer automatically for user access.

3. Final Answer:

   WordPress automatically adds a link to the Privacy Policy in the footer -> Option D

4. Quick Check:

   Privacy page linked in footer = True [OK]

Hint: Selecting Privacy page adds footer link automatically [OK]

Common Mistakes:

• Thinking page content is deleted
• Believing page becomes inaccessible
• Assuming page is hidden from search engines

4. You added a GDPR consent plugin but users report the consent banner does not show. What is the likely cause?

medium

A. The plugin is not activated or configured properly

B. WordPress does not support GDPR plugins

C. The website theme disables all banners

D. Users have JavaScript disabled, so banner never shows

Solution

1. Step 1: Check plugin activation and settings

   If the banner does not show, the plugin might be inactive or missing configuration.

2. Step 2: Evaluate other options

   WordPress supports GDPR plugins, themes usually don't block banners fully, and JavaScript disabled is rare.

3. Final Answer:

   The plugin is not activated or configured properly -> Option A

4. Quick Check:

   Plugin active and configured = Banner shows [OK]

Hint: Check plugin activation first if banner missing [OK]

Common Mistakes:

• Assuming WordPress blocks GDPR plugins
• Blaming theme without testing
• Ignoring plugin settings

5. You want to allow users to request their personal data export and deletion easily on your WordPress site. Which approach best achieves this?

hard

A. Use WordPress built-in tools and a GDPR plugin that adds user data request forms

B. Manually email users their data when requested

C. Disable all cookies to avoid storing data

D. Hide the Privacy Policy page to reduce user questions

Solution

1. Step 1: Identify WordPress GDPR tools

   WordPress has built-in tools for data export and erasure requests.

2. Step 2: Combine with plugins for user forms

   Plugins can add easy-to-use forms for users to request their data.

3. Step 3: Evaluate other options

   Manual emails are slow, disabling cookies breaks site, hiding policy is illegal.

4. Final Answer:

   Use WordPress built-in tools and a GDPR plugin that adds user data request forms -> Option A

5. Quick Check:

   Built-in tools + plugin = Best user data control [OK]

Hint: Combine WordPress tools with GDPR plugins for requests [OK]

Common Mistakes:

• Thinking manual emails are enough
• Disabling cookies breaks site function
• Hiding privacy info is illegal