I discuss an organization’s responsibility for protecting personal information.