With the EU General Data Protection Regulation (GDPR) now in force, and other new privacy laws on its heels, the concept of “adequate security” is becoming a legal mandate on a global level, and it is now commonly understood that privacy cannot truly be done without security. This overlap between privacy and security calls for new ways for these two teams to collaborate, communicate more effectively, and use common tools.