Privacy is a rapidly evolving topic and information security professionals are increasingly being asked to help their organizations determine the right balance between the risks of handling personal information and business value derived from that same information. It is no longer acceptable to collect everything and just store it securely. Decisions regarding privacy are becoming ever more nuanced. Therefore, understanding where we are with regards to privacy laws and regulations, how we arrived at this point and where we are heading is emerging as critical knowledge for many in the security field. This presentation will answer those questions and provide practical guidance for creating a privacy-aware organization -- one that is compliant with current regulations and one that will be able to respond to an increasingly demanding regulatory environment.