Canvis a "Mautic becoming the Marketing Automation Software with best support for data privacy requirements"

Has your proposal been discussed on the Mautic Forums already?

Its a never ending story - it will be discussed in many forum posts.
https://forum.mautic.org/search?q=gdpr

https://forum.mautic.org/t/is-it-possible-to-disable-tracking-per-email-basis-instead-of-on-the-whole-mautic-instance/28537/7

https://forum.mautic.org/t/rfc-improving-mautics-gdpr-compliance-cookie-management/27801

As of today, Mautic can't be used fully compliant with GDPR for all functions. There are possible hacks and patches, but out of the box several functions are not compliant.

Is your feature request related to a problem?

Mautic currently can't be used fully GDPR compliant. Also other regulations in other regions might be concerned (e.g California Consumer Privacy Act CCPA).

Describe the solution you'd like

1. Identify the code parts, that are responsible for the current state and create tasks for quick workaround / patches.
2. Improving the code to remove non compliant functions or allow to disable them.
3. Documentation of how to run Mautic in a compliant way.

Describe alternatives or workarounds you've considered

Quick patches to disable some functions are a quick interim solution, such as the described patch to disable Gravatar.

Additional context

Have a look here and in the linked forum entries.
A current document describes the status: https://twzn.de/mauticdp

Does this issue could impact on users private data?

Yes, Mautic currently sets e.g. cookies without consent and tracks data, that it shouldn't without consent.

Funded by
There are a couple of people supporting this task, would spend time to investigate more into the problem and providing patches. We could possibly also collect feedback from current business users and their willingness to spend money to have Mautic compliant with regulations in the near future.