Privacy — Multi-Regulation Data Subject Rights

Why a privacy module?

Privacy regulations give every user the right to request a full export of their personal data and the right to be forgotten. In a modular application, personal data is scattered across multiple modules — patient records, uploaded documents, notification logs, audit trails. Implementing these rights manually means every module needs custom export/deletion logic, and missing one module means a compliance violation.

Granit.Privacy turns this into a framework concern: modules register as data providers, and a saga orchestrates collection or deletion across all of them. Legal agreement tracking (privacy policy versions, consent records) is built in.

With Granit.Privacy.Regulations, the module supports 14 jurisdictions out of the box — from EU GDPR to Brazil LGPD, USA CCPA, China PIPL, and more. Each tenant can operate under a different regulation, resolved at runtime.

Package structure

DirectoryGranit.Privacy Data export saga, deletion with cooling-off, legal agreements
- Granit.Privacy.EntityFrameworkCore EF Core persistence for legal document version management
- Granit.Privacy.BlobStorage Streaming export pipeline — PrivacyFragmentUploader + PrivacyExportAssemblyService (sharded ZIP64 + signed manifest)
- Granit.Privacy.Regulations Regulation registry, 14 built-in profiles, per-tenant resolver
- Granit.Privacy.Regulations.Cookies Bridge — regulation-aware cookie consent model
- Granit.Privacy.Endpoints Minimal API endpoints for export, deletion, consent, regulation
- Granit.Privacy.BackgroundJobs Deletion deadline enforcer + export-assembly job
- Granit.Privacy.BackgroundJobs.Wolverine Export-assembly retry policy (1m/5m/15m → DLQ) + crash-resume
- Granit.Privacy.Auditing Bridge — records the export lifecycle to Granit.Auditing for Art. 30 ROPA
- Granit.Privacy.Notifications Deletion reminder, confirmation, and re-consent emails (8 types, 13 base languages, pt-BR LGPD-specific variants, regulation-aware deadlines)
- Granit.Privacy.AI AI-powered PII detection in free-text fields

Package	Role	Depends on
`Granit.Privacy`	Data export/deletion orchestration, legal agreements, opt-out	`Granit`, `Granit.Workflow`
`Granit.Privacy.EntityFrameworkCore`	EF Core persistence for `LegalDocument` version management	`Granit.Privacy`, `Granit.Persistence.EntityFrameworkCore`
`Granit.Privacy.BlobStorage`	Streaming export pipeline: `PrivacyFragmentUploader` (staging + HMAC) + `PrivacyExportAssemblyService` (sharded ZIP64 + signed manifest sidecar)	`Granit.Privacy`, `Granit.BlobStorage`
`Granit.Privacy.Regulations`	Regulation registry, 14 built-in profiles, per-tenant resolver	`Granit`
`Granit.Privacy.Regulations.Cookies`	Bridge: regulation-aware cookie consent model	`Granit.Http.Cookies`, `Granit.Privacy.Regulations`
`Granit.Privacy.Endpoints`	HTTP endpoints for data subject rights + regulation profile	`Granit.Privacy`, `Granit.Privacy.Regulations`, `Granit.Http.Cookies`, `Granit.Authorization`, `Granit.Validation`
`Granit.Privacy.BackgroundJobs`	Deletion deadline enforcer + export-assembly job	`Granit.Privacy`, `Granit.BackgroundJobs`
`Granit.Privacy.BackgroundJobs.Wolverine`	Export-assembly retry-with-cooldown (1m/5m/15m → DLQ) + per-shard crash-resume	`Granit.Privacy.BackgroundJobs`, `Granit.Wolverine`
`Granit.Privacy.Auditing`	Records the export lifecycle to the audit trail for Art. 30 ROPA	`Granit.Privacy`, `Granit.Auditing`
`Granit.Privacy.Notifications`	Deletion reminder and confirmation notification bridge + `{{ privacy }}` template global context (controller / DPO contact)	`Granit.Privacy`, `Granit.Notifications`, `Granit.Templating`
`Granit.Privacy.AI`	LLM-powered PII detection (`IAIPiiDetector`)	`Granit.Privacy`, `Granit.AI`

Setup

[DependsOn(typeof(GranitPrivacyModule))]
public class AppModule : GranitModule
{
    public override void ConfigureServices(ServiceConfigurationContext context)
    {
        context.Services.AddGranitPrivacy(privacy =>
        {
            privacy.RegisterDataProvider("PatientModule");
            privacy.RegisterDataProvider("BlobStorageModule");
            privacy.RegisterDocument(
                "privacy-policy", "2.1", "Privacy Policy");
            privacy.RegisterProcessingPurpose(
                "marketing-emails", "Marketing Communications",
                "Sending promotional emails", "CONSENT",
                requiresExplicitConsent: true);
        });

        // Register the multi-regulation engine
        context.Services.AddGranitPrivacyRegulations(
            context.Configuration);
    }
}

Data provider registry

Modules register themselves as data providers to participate in data export and deletion workflows:

privacy.RegisterDataProvider("PatientModule");

When a data subject requests export or deletion, the saga queries all registered providers and waits for each to complete.

Permissions summary

Permission	Scope
`Privacy.Exports.Execute`	Request a personal data export for one’s own data (self-service)
`Privacy.Exports.ExecuteOnBehalfOf`	Request an export on behalf of another data subject (admin DSR)
`Privacy.Deletions.Execute`	Request and cancel personal data deletion
`Privacy.Purposes.Read`	Read registered processing purposes
`Privacy.Agreements.Read`	View legal documents and consent status
`Privacy.Agreements.Create`	Accept a legal agreement

Public API summary

Category	Key types	Package
Module	`GranitPrivacyModule`, `GranitPrivacyRegulationsModule`, `GranitPrivacyEndpointsModule`	—
Regulation	`PrivacyRegulation`, `LegalBasis`, `ConsentModel`, `PrivacyRegulationProfile`	`Granit.Privacy.Regulations`
Resolution	`IPrivacyRegulationResolver`, `IRegulationProfileProvider`, `IRegulationProfileRegistry`	`Granit.Privacy.Regulations`
Deadlines	`IResponseDeadlineTracker`, `PrivacyRequestType`, `UpcomingDeadline`	`Granit.Privacy.Regulations`
Registry	`IDataProviderRegistry`, `ILegalDocumentRegistry`, `ILegalAgreementChecker`	`Granit.Privacy`
Purposes	`IProcessingPurposeRegistry`, `ProcessingPurposeDefinition`	`Granit.Privacy`
Opt-out	`IOptOutRecordReader`, `IOptOutRecordWriter`, `OptOutRecord`	`Granit.Privacy`
Builder	`GranitPrivacyBuilder`, `GranitPrivacyOptions`, `PrivacyRegulationOverrides`	`Granit.Privacy`
Events	`PersonalDataRequestedEto`, `PersonalDataDeletionRequestedEto`, `DeletionDeferredEto`, `OptOutRequestedEto`	`Granit.Privacy`
Endpoints	`MapGranitPrivacy()`, `PrivacyEndpointsOptions`, `PrivacyPermissions`	`Granit.Privacy.Endpoints`