The newswires and social media have lit up in recent days over the topic of privacy.  Between data being collected by technology companies like Google and Amazon to the data collected by governments (I don't believe for one minute that the U.S. is the only government gathering data on its citizens) to bank accounts being breached to healthcare information being compromised, the topic of privacy is creating some very heated debates.

Many of the discussions surround the assertion that, just because your organization has passed an audit or is deemed to be in compliance with some regulation, that your data is inherently secure and you have no more responsibility to take further action.  The assumptions that compliance equals security and security equals privacy are most often wrong.  Let's see why ...