Domain II — European Data Protection Law and RegulationCore GDPR concepts, security of personal data, and data subject rights—including EDPB guidance touchpoints.