An EU GDPR summary for business leaders — turning principles, lawful basis, rights, accountability, transfers, security and AI governance into a working operating model.