Managing Users - Letting in the Crowds

We have our courses structured and we have our teaching interactions developed, so now it is time to start introducing our users--both to the system itself through the provision of user accounts and to our courses through enrolment. Moreover, it is not just letting the crowds in. We need to consider how to manage them while they are in and how to see them out in an orderly fashion. There are privacy laws in the US (the Family Educational Rights and Privacy Act--FERPA) and the EU (the General Data Protection Regulation--GDPR) that provide the reasons why authentication (and its associated user data) has to be managed in specific ways--you will need to confirm how privacy laws affect you in your region. In addition, what of archiving user interactions and retrieving that data from the archives? This is an important consideration for our project...