Compliance with regulation alone can not assure privacy; it should ideally become an organization’s default mode of operation. Privacy is all about consent. What permission you give for your personal information to be collected, stored, and used. You can always manage and control the data you share with me.