With the increasing convergence of privacy and security this session will present new research examining how investment in privacy best practices such as data inventory, collection and retention policies, and de-identification can help significantly reduce the impact of a data breach. The research will seek to answer whether privacy spend may be a cost-effective way to reduce security risk.