A comprehensive data privacy program requires involvement from all parts of the business that deal with personal data.