Understand the rights of data subjects, breach notifications and how breaches have been handled in the past.