These include: (i) privacy notices, consents and individual rights; (ii) information security safeguards; (iii) third-party risk management; (iv) cross-border data transfers; and (v) employee training.