Despite cybersecurity being top of mind for the C-suite, data privacy is lagging, a new report finds