Evaluate learners' understanding of foundational data privacy principles (lawfulness, purpose limitation, data minimization, transparency), consent standards and validity, and requirements for cross‑border digital services — including legal transfer mechanisms (adequacy decisions, standard contractual clauses, binding corporate rules), data subject rights, DPIAs, privacy notices, and contractual/technical controls. Include applied scenario analysis that distinguishes when consent is required versus other lawful bases and examines implications for service design, vendor contracts, and multi‑jurisdictional compliance.