Do you lie awake at night wondering if your company is doing all it can regarding data privacy? You probably should. Almost daily, the news media reports another privacy breach, and it’s hard to escape it as a persistent problem in our information economy. Stories about the privacy foibles of major companies grace the covers of newspapers and magazines. We witness a continuous stream of regulatory fi ne and sanction announcements and breach notifi cations. We see organizations singled out in news stories and blog posts and on talk shows for bad privacy practices.