What does the cost include and exclude?

GDPR