Build a scalable, cost‑smart data privacy programme for SMEs and start‑ups