Read more on this topic in Data Protection and Consent Management.
If your company processes, stores and transmits personal data belonging to EU residents, you may be required to comply with the General Data Protection Regulations (GDPR). OroCommerce can assist you in observing these regulations by providing consent management mechanisms that enable you to create and manage new consents, and help your buyers view, manage and revoke consents applicable to them.
Consents are disabled by default, but you can enable them globally in the system configuration. If you have more than one website, you can add corresponding consents to specific websites, once consents are enabled and created globally.
Enable Consents for the Back-Office¶
Consents in OroCommerce can be enabled on the global configuration level only.
To enable consents:
Navigate to System > Configuration in the main menu.
Select Commerce > Customers > Consents in the menu to the left.
For faster navigation between the configuration menu sections, use Quick Search.
Next to the Enable User Consents field, clear the Use Default check box.
Select the Enable User Consents check box.
Click Save Settings.
Enabling consents adds the Consent Management menu under System.
Next to the Contact Reason field, clear the Use Default check box.
If the consent is declined in the storefront, a notification is created in the back-office as a contact reason. Select the contact reason from the list for a declined consent notification.
Enable Consents for the Storefront¶
Once the consents are enabled, you can add all or selected consents to the list of Enabled User Consents to display them in the storefront:
If there are no consents in the application yet, create them under System > Consent Management, as described in the Create Consents topic.
To add consents to the list of enabled consents:
Next to the Enabled User Consents field, clear the Use Default check box.
Click Add Consent and select the required consent(s) from the list.
Alternatively, click on the hamburger menu and select the consent(s) from its list.
If more than one consent is added to the Enabled User Consents list, you can drag and drop them to set the order in which these consents will be displayed in the storefront.
The number of consents that can be added to the list equals the number of consents created in the application. In addition, once consent cannot be added twice.
To delete a consent from the list of enabled consents, click x next to it.
Click Save Settings on the top right.