ABSTRACT
Although confidential information can be leaked by social engineering or even by somebody losing a piece of paper, misuse of personal data from information systems causes more widespread media coverage and results in the most conspicuous loss of reputation. Enforcing appropriate privacy practices across the enterprise needs a strong governance model with defined roles and responsibilities.
