Privacy and security in an organization