You need to ensure that an Azure AI service is compliant with data protection regulations. Describe the steps you would take to configure data encryption at rest and in transit, including how you would use Azure Key Vault to manage encryption keys and what considerations you would take into account for key rotation and access control.