The key tenets of protecting data privacy are: knowing where your data resides, understanding who has access to the data and what are they doing with it, and knowing how the data is being used internally that may result in non-compliance. Additionally, most compliance projects are major, company-wide initiatives and must be managed properly to meet deadlines and keep costs in check.