Manage day-to-day issues such as Subject Access requests (SARs) Handle data breaches using defined policies