It is well understood that implementing proper protections around sensitive data is critical for organizations. All companies by now have some sort of information security program. Many also have an information privacy program. However, most fail to leverage the inherent synergies of a comprehensive, integrated data protection program addressing both information privacy and security. This presentation will explain why this is needed, the inherent roadblocks to achieving this, and how to build such an integrated data protection program.