Apostrophe CMS Main Site Forum Home

Apostrophe and the EU GDPR


The General Data Protection Regulation (GDPR) will be active on 25th May 2018 and I wonder if Apostrophe CMS and all apostrophe-* modules are conform with the new regulations?

Do you have a look at the GDPR?


This is not something we’ve had time to study closely, but none of our enterprise partners have flagged it as an issue thus far, probably because Apostrophe itself has few features that would involve private data of site visitors, as opposed to site administrators. We are of course interested in making it easy to be compliant where it makes sense and is necessary but as an open source project we cannot accept responsibility for the compliance of individual sites.


The only thing I could think of are cookies, but Apostrophe does not set much of them. Probably only module developers who develop social and interactive modules like forms should be aware of privacy issues.

If I find something critical in Apostrophe or a module, I will open an issue on GitHub. :+1: