Customers are increasingly demanding protection for and control over their data. Firms do a better job of associating privacy with their brand and inspiring customer trust when they embrace privacy as a corporate social responsibility (CSR). This report describes the CSR practices of Fortune 100 firms, and explains the best ways security and privacy professionals can work to adopt privacy as a responsibility for all employees.