Data Privacy is constantly evolving and is becoming a very challenging risk management issue for most organizations today. The European Union’s General Data Protection Regulation(GDPR) is considered by some as the start of the privacy journey The newly adopted California Consumer Privacy Act (CCPA) will have a significant impact on core business operations and adds pressure on other states to follow suit. Some are calling for a federal bill.