You’re saying the following from GDPR doesn’t help?

* Data Classifications

* Privacy Impact Assessmemts

* Breach Escalations

* Access Controls

That’s more like Security 101 Basics to me.