DEV Community

Cover image for European Website Requirements, Made Practical for WordPress
Christian Ahrweiler
Christian Ahrweiler

Posted on • Originally published at Medium on

European Website Requirements, Made Practical for WordPress

European website requirements rarely arrive as a neat list of WordPress settings.

They appear across privacy rules, consumer rights, accessibility legislation and new transparency obligations. Website owners are then left with the practical question:

What does this mean for my website — and which part can actually be handled with a WordPress plugin?

Site Compliance was created to answer that question without turning it into legal marketing or an oversized compliance platform.

The new website brings together selected tools from the atec Plugins suite and explains the European requirements behind them in plain language.

One Requirement. One Focused Tool.

A cookie banner, accessibility checker and withdrawal form solve very different problems. Combining everything in one large plugin would make installation, configuration and maintenance unnecessarily complicated.

Site Compliance follows a simpler principle:

Use only the tools your website actually needs.

Each section begins with the practical EU requirement, explains how the corresponding WordPress plugin helps and clearly states what the plugin cannot guarantee.

The collection currently covers six areas.

Cookie Consent

Optional cookies and similar technologies generally require consent before they are activated. A visitor must be able to make a genuine choice rather than merely being informed that cookies are in use. EU guidance on website cookies

atec Cookies adds a lightweight consent banner to WordPress and exposes the visitor’s choice through the WordPress Consent API.

It does not add analytics, advertising or external services of its own.

A consent banner alone cannot identify every third-party script, however. Website owners must still know which services their pages load and configure them correctly.

Website Privacy

Themes, plugins, fonts, analytics tools, videos and embedded content can create connections to external domains. Some are obvious; others appear only after JavaScript runs.

atec Privacy Check examines a website for external connections and potential privacy issues. It helps identify third-party domains, scripts, fonts, embeds and other resources that may need to be reviewed, documented or controlled through consent.

The plugin reveals technical activity. It does not decide the appropriate legal basis or automatically generate a complete privacy policy.

Online Withdrawal

From 19 June 2026, businesses concluding eligible distance contracts through an online interface must provide an easily accessible electronic withdrawal function. Consumers must be able to submit their declaration online and receive an acknowledgement without undue delay. Directive (EU) 2023/2673

atec Withdrawal Form adds the required practical workflow to a WordPress page:

  • A visitor completes the withdrawal form
  • The declaration is delivered to the website administrator
  • The customer receives an automatic acknowledgement by email

The plugin works independently of WooCommerce and adapts to the active WordPress theme.

The website operator remains responsible for placing a clearly visible link to the form and determining when a right of withdrawal applies.

Privacy Requests

The GDPR gives individuals rights concerning their personal data, including access, correction, portability, restriction, objection and — under certain conditions — erasure. EU guidance on data protection under the GDPR

atec Privacy Request Form provides a clear way to submit these requests through WordPress.

The visitor selects the request type, provides the relevant information and receives an acknowledgement by email. The complete request is delivered directly to the website administrator without creating an additional request archive inside WordPress.

This distinction matters. Personal data may also exist in email, accounting software, CRM systems, payment services, logs and backups. A WordPress plugin cannot safely identify or automatically delete everything associated with a person.

The plugin receives and forwards the request. Identity checks and the actual handling of data remain the responsibility of the website operator.

AI Image Transparency

The EU AI Act introduces transparency obligations for certain artificially generated or manipulated content. Article 50 addresses both machine-readable identification by providers and disclosure obligations for particular types of content. The regulation does not simply require every AI-assisted image to carry the same visible label. EU AI Act

atec AI Image Label provides a practical visible disclosure for WordPress images.

Selected JPEG, PNG and WebP files receive an AI label directly in the image. The filename and public URL remain unchanged, while an untouched original is preserved for restoration.

Because the label becomes part of the file, it remains visible wherever the image is used — independently of the WordPress theme.

The plugin does not determine whether a particular image is legally required to be labelled, nor does it replace machine-readable provenance information supplied by an AI provider.

Website Accessibility

The European Accessibility Act has applied to covered products and services since 28 June 2025. Its scope includes areas such as e-commerce and other electronic services. European Accessibility Act overview

atec Web Inspector analyses the final frontend page produced by WordPress, the theme, plugins and JavaScript.

Potential accessibility problems are marked directly beside affected headings, images, links, forms and controls. An administrator can start an inspection from any frontend page through the WordPress admin bar.

Automated inspection cannot prove that a website is fully accessible. Some findings always require human review and practical keyboard or screen-reader testing.

Technical Assistance Without False Promises

No WordPress plugin can guarantee that an entire organisation complies with every applicable European rule.

Obligations depend on the website, business, services, users, location and national implementation. Important decisions may require individual legal advice.

Technical tools can still solve clearly defined parts of the problem:

  • presenting a consent choice
  • identifying external website resources
  • receiving an online withdrawal
  • accepting a privacy request
  • visibly labelling an AI-generated image
  • locating potential accessibility problems

That is the purpose of Site Compliance: explain the requirement, provide a focused tool and be honest about the boundary between technical implementation and legal responsibility.

Explore the website at sitecompliance.eu.

The featured plugins are part of the broader atec Plugins suite for WordPress performance, security, administration, media and everyday maintenance.

Site Compliance provides general technical information — not legal advice.

Top comments (0)