User data protection & privacy

When to use this skill

Use this skill whenever code handles personal data:

• Storing emails, names, addresses, phone numbers, IPs, or user-generated content.
• Logging requests/analytics that capture IPs or identifiers.
• Building forms, CRMs, comment features, membership/e-commerce data.
• Integrating third-party services that receive user data.

WordPress ships privacy tooling (export/erase requests, policy content) since 4.9.6. Plugins that store PII should integrate with it. Applicable privacy duties depend on jurisdiction and the site's processing; these integrations alone do not establish legal compliance. Minimizing data also reduces the impact of a security breach.

Core principles (and why they matter)