数据留存与删除策略#

/**
 * 数据留存策略注解
 * 用于标记数据字段的留存要求
 */
@Retention(RetentionPolicy.RUNTIME)
public @interface DataRetention {
    /**
     * 留存期限，如 "P3Y" 表示 3 年
     */
    String retentionPeriod();
    
    /**
     * 留存开始时间类型
     */
    RetentionStartType startType() default RetentionStartType.CREATED_AT;
    
    /**
     * 到期后处理方式
     */
    DisposalAction disposalAction() default DisposalAction.DELETE;
}

/**
 * 留存开始时间类型
 */
public enum RetentionStartType {
    CREATED_AT,    // 数据创建时间
    UPDATED_AT,     // 最后更新时间
    ACCESSED_AT,    // 最后访问时间
    EXPIRED_AT      // 业务截止时间
}

/**
 * 数据归档服务
 * 将满足条件的数据迁移到归档存储
 */
@Service
public class DataArchivalService {
    
    private final DataRepository dataRepository;
    private final ArchivalStorage archivalStorage;
    
    /**
     * 归档超过一年未访问的数据
     */
    @Scheduled(cron = "0 2 0 * * ?")  // 每天凌晨 2 点
    public void archiveInactiveData() {
        LocalDateTime threshold = LocalDateTime.now().minusYears(1);
        
        // 查找待归档数据
        List<DataRecord> records = dataRepository.findInactiveBefore(threshold);
        
        for (DataRecord record : records) {
            // 加密后迁移到归档存储
            ArchivalData encrypted = encryptForArchival(record);
            archivalStorage.save(encrypted);
            
            // 删除主存储中的数据
            dataRepository.deleteById(record.getId());
            
            // 记录归档日志
            archivalLogService.logArchival(record.getId(), threshold);
        }
    }
}

/**
 * 数据删除服务
 * 处理 GDPR 删除权和留存期限到期的删除
 */
@Service
public class DataDeletionService {
    
    private final DataRepository dataRepository;
    private final AuditLogService auditLogService;
    
    /**
     * 处理用户删除请求
     * GDPR 删除权实现
     */
    public DeletionResult processUserDeletionRequest(Long userId, DeletionRequest request) {
        List`DataRecord` records = dataRepository.findByUserId(userId);
        
        DeletionResult result = new DeletionResult();
        
        for (DataRecord record : records) {
            // 检查是否有保留数据的合法理由
            if (hasLegalRetentionBasis(record)) {
                result.addDeferredDeletion(record);
            } else {
                performDeletion(record);
                result.addDeleted(record);
            }
        }
        
        // 记录删除审计日志
        auditLogService.logDeletionRequest(userId, result);
        
        return result;
    }
    
    /**
     * 检查是否有法定留存理由
     */
    private boolean hasLegalRetentionBasis(DataRecord record) {
        // 检查是否有税务、诉讼等法定留存要求
        return record.hasTaxRetentionBasis() 
            || record.hasLitigationHold();
    }
}

/**
 * 删除证明服务
 * 生成符合合规要求的删除证明
 */
@Service
public class DeletionProofService {
    
    private final AuditLogService auditLogService;
    
    /**
     * 生成删除证明
     */
    public DeletionProof generateProof(DeletionRequest request, DeletionResult result) {
        return DeletionProof.builder()
            .requestId(request.getId())
            .userId(request.getUserId())
            .requestedAt(request.getRequestedAt())
            .completedAt(Instant.now())
            .deletedRecords(result.getDeletedRecords().stream()
                .map(this::createRecordProof)
                .collect(Collectors.toList()))
            .deferredRecords(result.getDeferredRecords().stream()
                .map(this::createDeferredProof)
                .collect(Collectors.toList()))
            .digitalSignature(signProof())
            .build();
    }
    
    /**
     * 为每条已删除记录创建证明
     */
    private RecordProof createRecordProof(DataRecord record) {
        return RecordProof.builder()
            .recordId(record.getId())
            .recordType(record.getType())
            .storageLocations(record.getStorageLocations())
            .deletionTime(record.getDeletedAt())
            .verificationMethod("抽样验证")
            .verifiedBy("system")
            .build();
    }
}