Does this repository collect any data on what users search? Does it collect if you are logged in and searching the IR?
Example we could use, except US Federal laws:
Digital Repository of Ireland operates in compliance with General Data Protection Regulation (GDPR) legislation 2018, as well as the Data Protection Acts 1988 and 2003 in terms of the collection and use of personal data.
OR something like:
Midwestern University Library's Institutional Repository operates in compliance with all U.S. Federal data laws. More privacy information about the Figshare platform