Over the past several weeks I have worked with clients and students who have ask if the Privacy Office should have responsibility for an organization’s overall information protection program. This gets a resounding “Yes” as a response without asking about culture, organizational...