To how large degree is CiviCRM GDPR-compliant. One example that I just now thought of is, what if someone calls us and wants all our records of correspondence deleted from our systems. Can I just delete the contact and all activities, memberships records, volunteering etc disappears? Or do I do a lot more than this to ensure I stay GDPR-compliant?

What are the plans to make CiviCRM GDPR-compliant (if such plans exist, or are considered)?


There is work ongoing to ensure that CiviCRM is GDPR-ready. Veda Consulting is leading on this I think, and there's an extension in progress here and some helpful background documentation here.

  • Thanks, so currently it isn't but is planned to be well before May 2018 if I understand this correctly. The detailed doc in the links looks to be something that will be very useful to me so that's good. Currently anonymizing the data is a mess, if read that "between the lines" correctly?
    – Martin
    Oct 27 '17 at 14:01
  • That's how I read it as well.
    – Graham
    Oct 27 '17 at 15:12

We've just released a new version which has anonymisation built into it. Please do take a look.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.