WordPress Personal Data Privacy Integration

Use WordPress' Privacy tools so an administrator can export and erase data owned by a plugin from Tools > Export Personal Data and Tools > Erase Personal Data. This is an engineering contract, not legal advice or a claim of GDPR compliance.

Start with a data inventory

Before writing callbacks, trace every personal-data store and transfer:

• options, user/post/term/comment meta, CPTs, attachments, custom tables;
• logs, queues, transients, caches, generated exports, and backups;
• data keyed by email, user ID, order/customer ID, IP, cookie ID, or token;
• remote providers and webhooks controlled by the plugin;
• retention reason, expiry, and whether deletion would break legal records.

Exporters and erasers must cover the same inventory. Do not assume deleting a WP_User removes plugin tables, files, remote copies, or denormalized logs.