Cybersecurity Awareness Month is a good time to visit the latest evidence of how cybersecurity and privacy are overlapping and often blending, evident in the convergence of laws and regulations in the space. Many frameworks also contain both cyber and privacy elements. There is overlap in regulatory enforcement as well – just last week, the FTC’s settlement with Marriott and Starwood to resolve charges that lax data security led to three large data breaches included both privacy and cybersecurity mandates. Despite the ties, there is still a hint of tension in how to govern data privacy and cybersecurity to ensure a cohesive, continued alignment. In this guest article, Divya Sridhar, vice president, global privacy division and privacy initiatives operations, and Leah Smyle, privacy compliance coordinator, both at BBB National Programs, examine and offer perspective on the crossover, and provide a plan of action for closing the gaps between these two operations and putting coordinated efforts to work. See “Fostering Collaboration and Communication Between Security and Compliance” (Mar. 13, 2024).