The surge of significant data breaches and cyber attacks seen in 2014 continued in 2015. Companies must understand the complex regulatory and enforcement frameworks that affect privacy and data security to avoid penalties, litigation, and reputational damage.