Feature Request: Implement GDPR, CCPA, DSGVO and EU cookie compliance (Tenant aware) #60
Description
Summary
Add a complete, tenant-aware privacy compliance module that implements GDPR (EU/DSGVO), CCPA/CPRA (California), and EU cookie consent requirements for all tenants within the multi-tenant FastAPI + MongoDB template.
Motivation
To ensure that every tenant using the platform can meet global privacy and data protection obligations by default, without having to manually implement complex regulatory flows themselves.
This feature will:
- Strengthen trust with end-users.
- Enable legal compliance across regions (EU, US).
- Reduce repetitive implementation work for each tenant or product team.
Requirements & Goals
GDPR / DSGVO (EU)
- Data Subject Requests (access, export, erase, rectify, restrict)
- Consent management (purposes, legal bases, versioning)
- Data minimization and retention enforcement
- Full audit trail (accountability)
CCPA / CPRA (California)
- “Do Not Sell or Share” registry
- GPC (Global Privacy Control) signal support
- DSRs: know, delete, correct
- 45-day deadline tracking
EU Cookie Compliance
- Cookie banner for consent before non-essential cookies
- Purposes: strictly necessary, functional, analytics, ads
- Integration with Google Consent Mode v2
- Optional IAB TCF 2.2 compliance layer