compliance-gdpr-privacy-expert

Data Privacy & Compliance Expert (GDPR, CCPA & UU PDP 2026)

English | Bahasa Indonesia

---

English

Orchestration & Integration

• Database & Data Retention: database-orm-expert, saas-multi-tenant, saas-billing
• Identity & Access Revocation: authentication-identity-expert, zero-trust-secret-vault
• Logging & Error Redaction: logging-error-tracking-expert, data-telemetry-expert
• Security & Red Teaming: autonomous-red-teamer, prompt-injection-firewall, rate-limit-abuse-prevention
• Lifecycle & Governance: production-ready-hardener, brainstorming, zero-to-prod-orchestrator, session-memory-manager

Description

Production engineering guide for regulatory data privacy and compliance across GDPR (EU), CCPA/CPRA (California), and UU PDP No. 27/2022 (Indonesia). Covers technical patterns for PII (Personally Identifiable Information) encryption at rest, cascading data anonymization (Right to be Forgotten while retaining immutable financial ledgers for tax authorities), consent state machines, and automated logger redaction.

Trigger Conditions

• Storing customer PII (names, emails, physical addresses, phone numbers, IP addresses, national IDs).
• Implementing compliant cookie consent banners with opt-in tracking scripts.
• Handling data deletion and export requests (Right to Access and Right to be Forgotten).
• Sanitizing logging pipelines to prevent accidental PII leakage to Datadog, Axiom, or Sentry.

Cascading PII Anonymization Routine (TypeScript / PostgreSQL)

Erases personal identity while preserving aggregate transaction integrity for accounting compliance:

// src/services/privacy-compliance.ts
import { db } from '@/lib/db';
import { sql } from 'drizzle-orm';
import crypto from 'node:crypto';

export async function processRightToBeForgotten(userId: string): Promise<void> {
  await db.transaction(async (tx) => {
    // 1. Generate irreversible cryptographic pseudo-identifier
    const pseudoHash = crypto.createHash('sha256').update(`${userId}-${process.env.PEPPER_SECRET}`).digest('hex').slice(0, 16);
    const anonymizedEmail = `deleted-${pseudoHash}@anonymized.internal`;

    // 2. Anonymize user record: scrub sensitive fields
    await tx.execute(sql`
      UPDATE users
      SET 
        name = 'Anonymized Customer',
        email = ${anonymizedEmail},
        phone_number = NULL,
        billing_address = NULL,
        ip_address = '0.0.0.0',
        is_anonymized = TRUE,
        anonymized_at = NOW()
      WHERE id = ${userId}
    `);

    // 3. Scrub profile sessions and third-party provider tokens
    await tx.execute(sql`DELETE FROM user_sessions WHERE user_id = ${userId}`);
    await tx.execute(sql`DELETE FROM oauth_accounts WHERE user_id = ${userId}`);

    // 4. Log compliance audit trail (immutable record of the erasure action)
    await tx.execute(sql`
      INSERT INTO privacy_audit_logs (id, action, target_pseudo_id, executed_at)
      VALUES (gen_random_uuid(), 'RIGHT_TO_BE_FORGOTTEN_EXECUTED', ${pseudoHash}, NOW())
    `);
  });
}