There has been much talk recently regarding a convergence of information security and privacy. Not that this is anything particularly new - convergence has been happening ever since privacy became a concern. After all, privacy requires the implementation of robust information security controls and appropriate safeguards. There are at least 46 privacy breach notice laws in the US alone; understanding and complying with their multiple requirements (to say nothing of the growing number of other national and international privacy laws) will require privacy and information security areas to work together for effective enterprise-wide management.