Privacy — Multi-Regulation Data Subject Rights

Why a privacy module?

Privacy regulations give every user the right to request a full export of their personal data and the right to be forgotten. In a modular application, personal data is scattered across multiple modules — patient records, uploaded documents, notification logs, audit trails. Implementing these rights manually means every module needs custom export/deletion logic, and missing one module means a compliance violation.

Granit.Privacy turns this into a framework concern: modules register as data providers, and a saga orchestrates collection or deletion across all of them. Legal agreement tracking (privacy policy versions, consent records) is built in.

With Granit.Privacy.Regulations, the module supports 14 jurisdictions out of the box — from EU GDPR to Brazil LGPD, USA CCPA, China PIPL, and more. Each tenant can operate under a different regulation, resolved at runtime.

Package structure

DirectoryGranit.Privacy Data export saga, deletion with cooling-off, legal agreements
- Granit.Privacy.EntityFrameworkCore EF Core persistence for legal document version management
- Granit.Privacy.Regulations Regulation registry, 14 built-in profiles, per-tenant resolver
- Granit.Privacy.Regulations.Cookies Bridge — regulation-aware cookie consent model
- Granit.Privacy.Endpoints Minimal API endpoints for export, deletion, consent, regulation
- Granit.Privacy.BackgroundJobs Deletion deadline enforcer job
- Granit.Privacy.Notifications Deletion reminder, confirmation, and re-consent emails
- Granit.Privacy.AI AI-powered PII detection in free-text fields

Package	Role	Depends on
`Granit.Privacy`	Data export/deletion orchestration, legal agreements, opt-out	`Granit`, `Granit.Workflow`
`Granit.Privacy.EntityFrameworkCore`	EF Core persistence for `LegalDocument` version management	`Granit.Privacy`, `Granit.Persistence.EntityFrameworkCore`
`Granit.Privacy.Regulations`	Regulation registry, 14 built-in profiles, per-tenant resolver	`Granit`
`Granit.Privacy.Regulations.Cookies`	Bridge: regulation-aware cookie consent model	`Granit.Http.Cookies`, `Granit.Privacy.Regulations`
`Granit.Privacy.Endpoints`	HTTP endpoints for data subject rights + regulation profile	`Granit.Privacy`, `Granit.Privacy.Regulations`, `Granit.Http.Cookies`, `Granit.Authorization`, `Granit.Validation`
`Granit.Privacy.BackgroundJobs`	Deletion deadline enforcer	`Granit.Privacy`, `Granit.BackgroundJobs`
`Granit.Privacy.Notifications`	Deletion reminder and confirmation notification bridge + `{{ privacy }}` template global context (controller / DPO contact)	`Granit.Privacy`, `Granit.Notifications`, `Granit.Templating`
`Granit.Privacy.AI`	LLM-powered PII detection (`IAIPiiDetector`)	`Granit.Privacy`, `Granit.AI`

Setup

[DependsOn(typeof(GranitPrivacyModule))]
public class AppModule : GranitModule
{
    public override void ConfigureServices(ServiceConfigurationContext context)
    {
        context.Services.AddGranitPrivacy(privacy =>
        {
            privacy.RegisterDataProvider("PatientModule");
            privacy.RegisterDataProvider("BlobStorageModule");
            privacy.RegisterDocument(
                "privacy-policy", "2.1", "Privacy Policy");
            privacy.RegisterProcessingPurpose(
                "marketing-emails", "Marketing Communications",
                "Sending promotional emails", "CONSENT",
                requiresExplicitConsent: true);
        });

        // Register the multi-regulation engine
        context.Services.AddGranitPrivacyRegulations(
            context.Configuration);
    }
}

Data provider registry

Modules register themselves as data providers to participate in data export and deletion workflows:

privacy.RegisterDataProvider("PatientModule");

When a data subject requests export or deletion, the saga queries all registered providers and waits for each to complete.

Permissions summary

Permission	Scope
`Privacy.Export.Execute`	Request personal data export
`Privacy.Deletion.Execute`	Request and cancel personal data deletion
`Privacy.Purposes.Read`	Read registered processing purposes
`Privacy.Agreements.Read`	View legal documents and consent status
`Privacy.Agreements.Create`	Accept a legal agreement

Public API summary

Category	Key types	Package
Module	`GranitPrivacyModule`, `GranitPrivacyRegulationsModule`, `GranitPrivacyEndpointsModule`	—
Regulation	`PrivacyRegulation`, `LegalBasis`, `ConsentModel`, `PrivacyRegulationProfile`	`Granit.Privacy.Regulations`
Resolution	`IPrivacyRegulationResolver`, `IRegulationProfileProvider`, `IRegulationProfileRegistry`	`Granit.Privacy.Regulations`
Deadlines	`IResponseDeadlineTracker`, `PrivacyRequestType`, `UpcomingDeadline`	`Granit.Privacy.Regulations`
Registry	`IDataProviderRegistry`, `ILegalDocumentRegistry`, `ILegalAgreementChecker`	`Granit.Privacy`
Purposes	`IProcessingPurposeRegistry`, `ProcessingPurposeDefinition`	`Granit.Privacy`
Opt-out	`IOptOutRecordReader`, `IOptOutRecordWriter`, `OptOutRecord`	`Granit.Privacy`
Builder	`GranitPrivacyBuilder`, `GranitPrivacyOptions`, `PrivacyRegulationOverrides`	`Granit.Privacy`
Events	`PersonalDataRequestedEto`, `PersonalDataDeletionRequestedEto`, `DeletionDeferredEto`, `OptOutRequestedEto`	`Granit.Privacy`
Endpoints	`MapGranitPrivacy()`, `PrivacyEndpointsOptions`, `PrivacyPermissions`	`Granit.Privacy.Endpoints`