View on GitHub


Make TYPO3 GDPR compatible

<- back

Working with personal data

The General Data Protection Regulation requires that people can revoke access to their data and that this data must be removed.

The extension makes it possible to exclude any record by activating a checkbox. After that, the record won’t be accessible and available anymore, no matter if backend or frontend, editor or admin.


A new administration module gives editors the possibility to handle those flagged records and react with one of the following options:


Every action regarding those flags is logged in a central place.


The following code what is needed to add a custom table to the GDPR extension. The code must be placed in the file Configuration/TCA/Overrides/<tableName/>.php

$tca = \GeorgRinger\Gdpr\Service\Tca::getInstance('<tableName>');
    ->addRestriction('gdpr_restricted') // name of the field used for the checkbox to flag records 
    -add('after:disable'); // positioning of the new field

Technical background

The implementation is based on the RestrictionContainers of the TYPO3 core.


The limitation of the implementation is that only records having a TCA configuration are covered. Furthermore direct access to the database without using the QueryBuilder of TYPO3 will still deliver every record.