When to activate: GDPR, data protection, EU privacy, personal data, data subject rights, DPA, lawful basis, consent, data breach, DPIA, international transfers, privacy by design