Isn't local storage pretty good for compliance? It doesn't automatically send the data to your server like a cookie would, so as long as you don't send it, you haven't collected it.