How to operationalise privacy compliance — turning regulation into governance, process triggers, controls, evidence and reporting that work under scrutiny.