Have a clear documentation about WP Cerber’s cookies and their purpose
-
Our organization’s DPO says (located in Hungary under GDPR law) we also need to list WP Cerber’s cookies under a cookie selection dialog when a new visitor opening our site (hence the Dfactory Cookie Notice plugin is not complaint), turned them off by default.
I sent him this link from your site, where you talking about cookies.
As webmaster of our site, I told him my concerns about this, because I also responsible for security. I told him attackers probably don’t give a damn too much writing robots which accepting law agreements before trying to hack our site. He told me the user also needs to accept cookies which are neccesary for the site’s operation, regardless if it’s a firewall plugin or not…
I want to ask WP Cerber’s creators to have a clear documentation what each cookie does and what purpose they have? This way I also can have a clear idea and I can send this link to our DPO. I think lot of other organization will benefit from this.
I don’t have a template for such cookie documentation, I also following the European Commission’s docs about cookies:
https://ec.europa.eu/info/cookies_enI also want an option in the admin and a js function, where I can enable or disable the cookies of this plugin. I know it’s a lot to ask for, but at the current state, the plugin is not suited for governmental use and have a grey hole about it’s cookie policy.
-
Thank You for your answer!
Yes, this was my answer as well. The problem is:
- There is the european GDPR law, which we need to comply
- There is the National Data Security and Information Safety Authority, which interpreted GDPR in their own way, which we need to comply
- There is our DPO, who is responsible to give guidance for us, how we need to comply
You can bet, when we arrive at the last point, complying with the GDPR law become much harder for a village with the population of 2600+, than the European Comission’s website…
For now, I used the prefix in Cerber’s cookie names and a wildcard in my Cookie policy, where I describing Cerber’s cookies: fw_#
Right now, the current accepted method of dealing with cookies according to our DPO: block every cookie until the user not accept them, also mandatory to include a selectable form to control which cookie groups the user want to enable. That’s why the dfactory Cookie Notice plugin is not compaint with our national law.
Because of this last point, controlling cookie loading on code level also important for every plugins.
- The topic ‘Have a clear documentation about WP Cerber’s cookies and their purpose’ is closed to new replies.
