$ show sander3/laravel-gdpr
This Laravel package provides GDPR compliance features for applications. It includes an endpoint for users to download their personal data (after re-authentication), traits for automatic encryption and decryption of model attributes, and a mechanism for exporting model data in a portable JSON format. Additionally, it offers a command to clean up inactive users based on a configurable retention period, using a strategy pattern to allow customization of the cleanup logic. The package is designed to be framework-agnostic within Laravel, relying on Eloquent models and standard Laravel features.
The LLM identified 2 files worth highlighting for reuse:
This trait provides automatic encryption and decryption of specified Eloquent model attributes. It overrides the model's attribute accessors to encrypt values when setting and decrypt when getting, ensuring sensitive data is stored encrypted in the database and transparently decrypted when accessed. The trait is self-contained, requiring only the application key to be set, and can be reused in any Eloquent model by adding the trait and defining the `$encrypted` property.
This trait enables Eloquent models to be converted into a GDPR-compliant array representation for data export. It handles eager loading of relationships (only if they also implement the Portable contract), applies visibility rules via `$gdprVisible` and `$gdprHidden` properties, and recursively converts related models to portable arrays. The trait is decoupled from the specific application and can be used in any Eloquent model that needs to export data, making it a versatile component for data portability features.