Google Cloud Platform Data Protection Questions

Assess how the candidate protects data on Google Cloud Platform including encryption at rest and in transit, field level encryption for personally identifiable information, key lifecycle and rotation using Cloud Key Management Service, secrets management for credentials, data classification and access controls, data residency and retention controls to meet regulations, and privacy preserving techniques to support data subject rights. Answers should cover balancing protection with performance and operational needs.