Struct GdprManager 

pub struct GdprManager { /* private fields */ }

GDPR compliance manager

Implementations

impl GdprManager

pub fn new(max_audit_entries: usize) -> Self

Create a new GDPR manager

pub async fn register_consent( &self, user_id: String, category: DataCategory, purpose: String, legal_basis: String, ) -> Result<(), AppError>

Register consent for data processing

pub async fn withdraw_consent( &self, user_id: &str, category: &DataCategory, ) -> Result<(), AppError>

Withdraw consent for data processing

pub async fn has_consent(&self, user_id: &str, category: &DataCategory) -> bool

Check if user has given consent for a data category

pub async fn export_user_data(&self, user_id: &str) -> Result<Value, AppError>

Export all user data (GDPR Article 20)

pub async fn register_data_location( &self, category: DataCategory, path: PathBuf, )

Register data location for tracking

pub async fn audit_data_operation( &self, user_id: String, operation: DataOperation, category: DataCategory, details: String, legal_basis: String, )

Audit data operation

pub async fn get_user_audit_trail(&self, user_id: &str) -> Vec<DataAuditEntry>

Get audit trail for a specific user

pub async fn get_audit_trail(&self, limit: Option<usize>) -> Vec<DataAuditEntry>

Get full audit trail

pub async fn get_user_consents(&self, user_id: &str) -> Vec<ConsentRecord>

Get consent status for user

impl GdprManager

pub async fn delete_user_data( &self, user_id: &str, verify: bool, ) -> Result<Vec<String>, AppError>

Delete all user data (GDPR Article 17 - Right to be forgotten).

If verify is true, this does not delete anything; it returns a list of items that would be deleted.

Note: this function intentionally avoids holding async lock guards across .await points (e.g., while deleting files) to prevent deadlocks and satisfy clippy::await_holding_lock.

impl GdprManager

pub async fn generate_privacy_report(&self) -> Value

Generate a privacy report summarizing stored GDPR-related metadata.

This report is intended for administrative visibility and does not contain raw user data. It includes counts for consents, audit entries, and tracked data locations.