Understand collected data, purpose limitation, role-based access, retention, deletion, exports, deployment choices, and international legal readiness.