Our Omnichannel Solution is compliant with GDPR. We are always working on new security measures to make sure your data is secured at all time. You can check out the latest updates here.
If you want to process customer's request about personal data, Magento has a portal with all relevant resources to help. In particular, website developers can look at the architecture guide for Magento 1 and Magento 2 to handle requests. In addition to this, we have also prepared a GDPR Product Guideline , which complements the other guide from Magento. This will give our customers a good idea of how personal data is stored in our system.