GDPR and CCPA in operating terms: consent, minimisation, security frameworks and what a breach actually costs.