We offer a practical guide to what to require, and how to audit and respond to incidents, including legal obligations, consent management, and a checklist to reduce risks.