From social media APIs to VR performance art, artists are collecting, generating, and transforming digital data. Give that one of art’s central projects throughout history is the disruption of social norms, this field poses unusual privacy challenges. Can privacy frameworks like contextual integrity even help us think about privacy norms for non-normative contexts? In addition, galleries, museums, production companies, and individual artists often operate as small businesses without substantive expertise in data security or privacy. I will present one case study (in progress) of a small theater company that faces privacy challenges during the development of an immersive theater piece involving audience data.