Covers privacy operations: GDPR principles and lawful bases, data subject access requests, records of processing, DPIAs, consent management, data minimisation and privacy by design. Also covers cross-border transfers, breach notification timelines, CCPA/CPRA and India DPDP Act basics, and privacy tools such as OneTrust.