Privacy is 100% a number one priority. It always should be and should have been in all businesses minds. They end up paying more to fix a breach then they would of if they would have put risk mitigation plans in place the first place. It amazes me how careless companies have been with PII.
A well maintained thought process. Privacy impact analysis and subsequent corrective measures for every deployment by the infrastructure team should be mandated in organizations where securing individual's data are becoming one of their top priorities.