Analysis of personal-data processing, privacy compliance, cross-border transfers, data-processing agreements and cybersecurity responsibilities.