Data has the right to be protected. Privacy and Integrity are those that make any kind of data unique. To initiate the process of data privacy protection, there are basic ground rules to be followed. The basic qualification should be the need perceived for data. Vital organization data has to be protected first. On segregating such data, all storages that protect them are to be secured from external access. 

Physical security and automated processes are needed to protect enterprise data. When data is released for testing environment it should be de-sensitized of its personal information. Software solutions for privacy protection must aim at reducing risks in a non-productive environment. Additionally, it is a must to have separate database administrators from security angle for providing complete privacy control.