Data Governance, Compliance, and Privacy-First Design