Organizations recognize the increasing risk involved in securing and managing personal data, drivenby strict privacy and data protection legislation. Noncompliance bears a heavy cost. Considerablefinancial penalties from noncompliance with regulations like the GDPR, CCPA and LGPD areobvious incentives; however, jail sentences for executives (e.g., federal bills in the U.S. and Mexico 1 )are also a motivator on this topic for businesses of all sizes. Privacy concepts such as the “right tobe forgotten” has consequences for application design, workflow, data security, call center and helpdesk training, and more. As a result, privacy is becoming an increasingly influential, defineddiscipline of its own, affecting almost all aspects of an organization.