MDPA Compliance Review

$675

An MDPA compliance review checks your WordPress site against the privacy expectations of the Massachusetts Data Privacy Act: cookie consent, data collected by your plugins, and how your site handles visitors’ personal information. It’s $675 and ends with a remediation checklist. I work in person around Worcester County, Boston and New England, and remotely for anyone else.

Why WordPress sites need a specific review

Most privacy problems on WordPress sites aren’t in the privacy policy. They’re in the plugins: analytics, forms, chat widgets and marketing tools that collect and send data in the background, often before a visitor agrees to anything. A general privacy template can’t see that. This review looks at what your site actually does.

What I review

Cookie consent: whether your banner actually blocks tracking until a visitor agrees, and whether “reject” works as well as “accept”
Plugin telemetry: which plugins collect or send data, and to whom
Data handling: what your forms collect, where submissions are stored, who can see them and how long they’re kept

What you get

A remediation checklist, in priority order, of what to change on the site
Notes on which changes are quick settings and which need development work

This is a technical review of your website, not legal advice. Your attorney decides what the law requires of your business. I make sure the website does what you’ve decided it should.

Background: Is Your WordPress Site Violating the 2026 Massachusetts Data Privacy Act? Ongoing compliance monitoring is part of the Partner retainer, and a broader Security Audit covers how well that data is protected.