Privacy is no longer just a legal or IT issue — it has become a core business risk and a leadership responsibility.