Privacy and security in an Organization