The underlying foundation of WordPress itself is fully GDPR compliant, but that can change as soon as you make customizations to your website. Things like themes, plugins, and other elements all come with their own cookies. This requires you to scan your site’s cookies, create a cookie consent form, and present it to any visitors.