Compliance

# Engineering hooks only. Not legal advice. Not a GDPR/CCPA/AI Act implementation. from datetime import datetime, timedelta, timezone PURPOSES = {"provide_support", "security_audit", "optional_quality_improve"} def new_record(user_id: str, purpose: str, payload_ref: str, ttl_days: int) -> dict: if purpose not in PURPOSES: raise ValueError("unknown_purpose") if purpose == "optional_quality_improve": raise ValueError("requires_explicit_preference_flag") # check prefs store first now = datetime.now(timezone.utc) return { "user_id": user_id, "purpose": purpose, "payload_ref": payload_ref, # pointer, not a second PII copy "created_at": now.isoformat(), "delete_after": (now + timedelta(days=ttl_days)).isoformat(), "legal_hold": False, } def can_use_for_training(prefs: dict) -> bool: return bool(prefs.get("quality_improve_opt_in")) and not prefs.get("do_not_share_like_flag") def rights_export(user_id: str, stores: dict) -> dict: """Assemble what you can find. Incomplete stores = a compliance bug to fix.""" return { "user_id": user_id, "chats": stores["chat"].list(user_id), "tickets": stores["ticketing"].list(user_id), "generated_at": datetime.now(timezone.utc).isoformat(), "note": "Embeddings/indexes must be included via rebuild jobs — see privacy runbook.", } def rights_delete(user_id: str, stores: dict, legal_hold: bool) -> dict: if legal_hold: return {"ok": False, "reason": "legal_hold_escalation"} results = {} for name, store in stores.items(): results[name] = store.delete_user(user_id) # chats, logs, index rebuild queue return {"ok": True, "results": results}