Privacy governance frameworks and internal policies

Privacy notices, consent mechanisms and user-facing disclosures

Data processing agreements and cross-border transfer arrangements

Data protection impact assessments (DPIAs) and records of processing activities

Vendor privacy reviews and contractual allocation of data protection obligations

Incident response, breach notification and regulator engagement