• Data protection policies
  • Organizational setup for data protection
  • Roles: Controller, Processor, DPO