Build and implement processes and tools to address company compliance requirements. A comprehensive program includes the following components: data inventory, risk assessment, transparency, data usage, data retention, data disposal, third-party and onward transfer considerations, etc.