Information privacy is an important information management issue that continues to challenge managers, policy makers, and researchers. Although we have investigated information privacy concerns at individual and national levels, there remains a significant gap in our understanding of the costs and benefits accruing to the organization when it does—or does not—develop business processes to protect customer and employee information. This panel focuses on the organization in the privacy equation, asking, “Is it possible to successfully institutionalize good privacy practices? Can organizations prevent privacy disasters?”