Skip to content

Cover GDPR data-deletion paths in compliance tests #752

Description

@nanaf6203-bit

Problem Statement

contracts/gdpr/lib.rs.tests for withdraw_consent exist but no clean-up of derived data (timelines, audit hashes).

Why it matters

GDPR Article 17 — right to erasure — requires that all derived identity traces become unreachable.

Technical Context

Add tests asserting: after withdraw_consent, (subject, purpose) returns false; cross-references in audit log are tombstoned; storage is reclaimable.

Expected Outcome

Withdraw consent purges all derived references.

Acceptance Criteria

  1. cargo test -p propchain-gdpr includes 5 new withdrawal cases.
  2. Tombstone coverage documented.
  3. New tests/gdpr_erasure.rs.
  4. SDK updated.

Implementation Notes

Add explicit withdraw_consent test vectors.

Files or modules likely to be affected

contracts/gdpr/lib.rs, tests/.

Dependencies

None.

Difficulty level

MEDIUM.

Estimated effort

M (~2 days).

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions