Complying with data privacy laws: Understanding and implementing GDPR, NIS2, and the Cyber Resilient Act