This issue is the master issue where we discuss new features and changes needed in Matomo to make it easier for users be GDPR compliant.

With Matomo, privacy is built-in. We offer several privacy controls already, but this is not enough for GDPR compliance.

Steps we will take to make Matomo GDPR compliant:

• GDPR - Overview / Info Screen GDPR - Overview / Info screen #12594
• GDPR - Rights to access data GDPR - Right to access data #12595
• GDPR - Right to erasure or right to be forgotten GDPR - Right to erasure or right to be forgotten #12596
• GDPR - Right to rectification GDPR - Right to rectification #12597
• GDPR - The data subject right to restriction of processing & The right to withdraw consent GDPR - The data subject right to restriction of processing / The right to withdraw consent #12598
• GDPR - The right to be informed GDPR - The right to be informed #12599
• GDPR - Compliance for old data collected without consent, Data Anonymisation & Removal tool Personal Data Anonymisation & Removal tool for analytics raw data - GDPR compliance #12641

GDPR rights which we won’t cover (at least for now):

• GDPR - Right to data portability: Not applicable to Matomo.
• GDPR - Rights around automated decision making and profiling: By default, automated decision making and profiling is not possible with Matomo so we won’t cover this right, at least for now.

We’re planning to finish this work at least 1 month before the GDPR start date of May 25th.

Please check these issues and feel free to comment.