# Privacy API Design — Standards References

## API Standards
- OpenAPI Specification 3.1.0 (swagger.io/specification)
- RFC 6749: OAuth 2.0 Authorization Framework
- RFC 7519: JSON Web Token (JWT)
- RFC 7636: Proof Key for Code Exchange (PKCE)
- OWASP API Security Top 10 (2023)

## Privacy Regulatory Basis
- GDPR Articles 12-22: Data subject rights (API endpoints for rights exercise)
- GDPR Article 7: Consent management (consent API basis)
- GDPR Article 17: Right to erasure (deletion API basis)
- GDPR Article 30: Records of processing (audit API basis)
- CCPA Sections 1798.100-135: Consumer rights and business obligations

## Industry Patterns
- Google Privacy Sandbox API Design Guidelines
- Apple App Tracking Transparency API
- Microsoft Graph Privacy API
- Cisco Privacy Rights Manager API