> "privacy-level agreement"... IANAL. You have described EU GDPR. However any fines are paid to goverments, but you can still decide to arbitraly compensate th

> "privacy-level agreement"... IANAL. You have described EU GDPR. However any fines are paid to goverments, but you can still decide to arbitraly compensate the customers. If the country of your business doesn't provide similar framework then only regular independent audits performed by customer-trusted entity may uncover your wrongdoings.