How do I support end users' privacy rights, consent, and requests to be forgotten under GDPR or any other relevant privacy requirements?