GDPR / CCPA Compliance

[dkapell]

We need a GDPR / CCPA Compliance statement / possible changes to the site to support that

[nbudin]

At this point we now have:

• A cookie policy
• A CMS tag you can use to display a cookie consent banner ({% cookie_consent https://url/for/cookie/policy %})
• Simple, anonymous in-server analytics that we control (in order to stop using Google Analytics)
• Updated Rollbar settings to avoid sending any identifiable data to them

I think as far as trackers go, this should cover us. We still don't have a GDPR/CCPA statement, but hopefully the above changes should make it relatively easy to create one.

I'm comfortable being the GDPR compliance officer for NEIL and handling requests to purge user data myself; if I get more than a couple of them I will automate the process.