This does not answer the question in specific, but those are some resources regarding the question (feel free to add stuff).
Blog Articles and Discussions
- Who is WordPress talking to? (Interconnect IT, 07 March 2011)
- What Data Does WordPress Send Back to the Mothership (Lynne Pope; 14 Dec 2009)
- Is WordPress Spyware? (Jeff Chandler; 10 Dec 2009)
- WordPress Tavern Forums: WordPress and phone home (Started 7 Dec 2009)
- wp-hackers Mailinglist: Revisiting phone home and privacy (Started 7 Dec 2009)
- WordPress 2.3 Does Not Spy On Users [UPDATED] (Slashdot; 25 Sep 2007)
-
wp-hackers Mailinglist: Plugin update & security / privacy Options (Started 23 Sep 2007)
WP core resources and Trac Tickets
- WordPress.org Privacy Policy
- Trac tickets
- Ticket #16818 – Akismet should suggest user to check current legal situation regarding data protection
- Ticket #16778 – wordpress is leaking user/blog information during wp_version_check()
- Ticket #12672 – Provide Multisite stats to api.wordpress.org
- Ticket #5066 – Anonymize update checking
- Ticket #5065 – Unify User-Agent strings
- Core code snippets
Code Stubs
Questions regarding Akismet, Facebook and other Add-Ons alike that deal with personal data
- Blogs making use of third-party tools should check the current legal situation regarding data protection while making a third-party dealing with user-input.
- Can you as a blog owner ensure that you can fulfill your blogs users rights on their data? Like document to whom you sent their data and how to deal with deletion requests on your behalf?