How do we prove compliance—prove to a regulator, or a CEO, that privacy is in good shape? In this lively panel discussion about privacy metrics for internal and external (e.g., regulatory) consumption, the speakers will represent four different viewpoints: corporate policy, infrastructure, enterprise risk and the sales/marketing business group. Each panelist will share specific metrics they’ve chosen for their business group, a few samples of reporting and (in some cases, hard) lessons learned about developing measurement and metrics programs in privacy. New and experienced privacy pros from small or large organizations at corporate or business group levels are all welcome. Case studies and materials will be available after the session, and audience participation is encouraged.