Privacy breaches can cause a cascade of negative impacts on enterprises, as well as significant harm to the associated data subjects. Enterprises may suffer financial loss and reputational damage, be charged with failure to comply with regulations and legislation, and alienate key stakeholders who demand safety of personal information. To avoid these outcomes, enterprises must establish and maintain a formal privacy protection program. This publication shows how to optimize a privacy program built on the framework of COBIT® 5 through focused, yet comprehensive, application of its enablers.