In light of substantial fines for noncompliance and growing pressure from courts, competitors, and customers, security and risk (S&R) professionals must now orchestrate new privacy and data protection strategies. To succeed, many will seek help from consulting firms. With a broad vendor landscape and complex and expensive options to choose from, selecting the right consultant will be difficult. This report provides S&R professionals with an overview of the privacy and data protection offerings from seven global consulting firms and suggests three selection criteria to help them choose the best option.